cpe:/o:linux:linux_kernel:2.6.20.1

CVE-2004-0001

2004-02-17T00:00:00.000-05:00

2017-10-09T21:30:15.813-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

GENTOO GLSA-200402-06 CERT-VN VU#337238 REDHAT RHSA-2004:017 BID 9429 XF linux-ptrace-gain-privilege(14888) Unknown vulnerability in the eflags checking in the 32-bit ptrace emulation for the Linux kernel on AMD64 systems allows local users to gain privileges.

cpe:/o:freebsd:freebsd:3.0 cpe:/o:freebsd:freebsd:3.0:releng cpe:/o:freebsd:freebsd:3.1 cpe:/o:freebsd:freebsd:3.2 cpe:/o:freebsd:freebsd:3.3 cpe:/o:freebsd:freebsd:3.4 cpe:/o:freebsd:freebsd:3.5 cpe:/o:freebsd:freebsd:3.5:stable cpe:/o:freebsd:freebsd:3.5.1 cpe:/o:freebsd:freebsd:3.5.1:release cpe:/o:freebsd:freebsd:3.5.1:stable cpe:/o:freebsd:freebsd:4.0 cpe:/o:freebsd:freebsd:4.0:alpha cpe:/o:freebsd:freebsd:4.0:releng cpe:/o:freebsd:freebsd:4.1 cpe:/o:freebsd:freebsd:4.1.1 cpe:/o:freebsd:freebsd:4.1.1:release cpe:/o:freebsd:freebsd:4.1.1:stable cpe:/o:freebsd:freebsd:4.2 cpe:/o:freebsd:freebsd:4.2:stable cpe:/o:freebsd:freebsd:4.3 cpe:/o:freebsd:freebsd:4.3:release cpe:/o:freebsd:freebsd:4.3:release_p38 cpe:/o:freebsd:freebsd:4.3:releng cpe:/o:freebsd:freebsd:4.3:stable cpe:/o:freebsd:freebsd:4.4 cpe:/o:freebsd:freebsd:4.4:release_p42 cpe:/o:freebsd:freebsd:4.4:releng cpe:/o:freebsd:freebsd:4.4:stable cpe:/o:freebsd:freebsd:4.5 cpe:/o:freebsd:freebsd:4.5:release cpe:/o:freebsd:freebsd:4.5:release_p32 cpe:/o:freebsd:freebsd:4.5:releng cpe:/o:freebsd:freebsd:4.5:stable cpe:/o:freebsd:freebsd:4.6 cpe:/o:freebsd:freebsd:4.6:release cpe:/o:freebsd:freebsd:4.6:release_p20 cpe:/o:freebsd:freebsd:4.6:releng cpe:/o:freebsd:freebsd:4.6:stable cpe:/o:freebsd:freebsd:4.6.2 cpe:/o:freebsd:freebsd:4.7 cpe:/o:freebsd:freebsd:4.7:release cpe:/o:freebsd:freebsd:4.7:release_p17 cpe:/o:freebsd:freebsd:4.7:releng cpe:/o:freebsd:freebsd:4.7:stable cpe:/o:freebsd:freebsd:4.8 cpe:/o:freebsd:freebsd:4.8:pre-release cpe:/o:freebsd:freebsd:4.8:release_p6 cpe:/o:freebsd:freebsd:4.8:releng cpe:/o:freebsd:freebsd:4.9 cpe:/o:freebsd:freebsd:4.9:pre-release cpe:/o:freebsd:freebsd:5.0 cpe:/o:freebsd:freebsd:5.0:alpha cpe:/o:freebsd:freebsd:5.0:release_p14 cpe:/o:freebsd:freebsd:5.0:releng cpe:/o:freebsd:freebsd:5.1 cpe:/o:freebsd:freebsd:5.1:release_p5 cpe:/o:freebsd:freebsd:5.1:releng cpe:/o:freebsd:freebsd:5.2

CVE-2004-0002

2004-03-03T00:00:00.000-05:00

2008-09-10T15:24:44.507-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

CONFIRM http://lists.freebsd.org/pipermail/cvs-src/2004-January/016271.html The TCP MSS (maximum segment size) functionality in netinet allows remote attackers to cause a denial of service (resource exhaustion) via (1) a low MTU, which causes a large number of small packets to be produced, or (2) via a large number of packets with a small TCP payload, which cause a large number of calls to the resource-intensive sowakeup function.

cpe:/o:linux:linux_kernel:2.4.22

CVE-2004-0003

2004-03-03T00:00:00.000-05:00

2017-10-10T21:29:19.620-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CIAC O-082 CIAC O-121 CIAC O-126 CIAC O-127 CIAC O-145 DEBIAN DSA-479 DEBIAN DSA-480 DEBIAN DSA-481 DEBIAN DSA-482 DEBIAN DSA-489 DEBIAN DSA-491 DEBIAN DSA-495 CONFIRM http://www.linuxcompatible.org/print25630.html MANDRAKE MDKSA-2004:029 SUSE SuSE-SA:2004:005 REDHAT RHSA-2004:044 REDHAT RHSA-2004:065 REDHAT RHSA-2004:106 REDHAT RHSA-2004:166 BID 9570 TURBO TLSA-2004-14 XF linux-r128-gain-priviliges(15029) Unknown vulnerability in Linux kernel before 2.4.22 allows local users to gain privileges, related to "R128 DRI limits checking."

cpe:/a:openca:openca:0.9.1.6

CVE-2004-0004

2004-02-17T00:00:00.000-05:00

2017-10-09T21:30:15.890-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040116 [OpenCA Advisory] Vulnerability in signature verification CERT-VN VU#336446 CONFIRM http://www.openca.org/news/CAN-2004-0004.txt BID 9435 XF openca-improper-signature-verification(14847) The libCheckSignature function in crypto-utils.lib for OpenCA 0.9.1.6 and earlier only compares the serial of the signer's certificate and the one in the database, which can cause OpenCA to incorrectly accept a signature if the certificate's chain is trusted by OpenCA's chain directory, allowing remote attackers to spoof requests from other users.

CVE-2004-0005

2004-03-03T00:00:00.000-05:00

2017-07-10T21:29:51.743-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20040126 Advisory 01/2004: 12 x Gaim remote overflows CONECTIVA CLA-2004:813 BUGTRAQ 20040126 Advisory 01/2004: 12 x Gaim remote overflows MISC http://security.e-matters.de/advisories/012004.html DEBIAN DSA-434 CERT-VN VU#190366 CERT-VN VU#226974 CERT-VN VU#404470 CERT-VN VU#655974 SUSE SuSE-SA:2004:004 SECTRACK 1008850 SLACKWARE SSA:2004-026 XF gaim-yahoodecode-offbyone-bo(14935) XF gaim-sscanf-oob(14938) XF gaim-mime-decoder-bo(14942) XF gaim-mime-decoder-oob(14944) GENTOO GLSA-200401-04 Multiple buffer overflows in Gaim 0.75 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) octal encoding in yahoo_decode that causes a null byte to be written beyond the buffer, (2) octal encoding in yahoo_decode that causes a pointer to reference memory beyond the terminating null byte, (3) a quoted printable string to the gaim_quotedp_decode MIME decoder that causes a null byte to be written beyond the buffer, and (4) quoted printable encoding in gaim_quotedp_decode that causes a pointer to reference memory beyond the terminating null byte.

cpe:/a:rob_flynn:gaim:0.75 cpe:/a:ultramagnetic:ultramagnetic:0.81

CVE-2004-0006

2004-03-03T00:00:00.000-05:00

2017-10-10T21:29:19.730-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SGI 20040201-01-U SGI 20040202-01-U FULLDISC 20040126 Advisory 01/2004: 12 x Gaim remote overflows CONECTIVA CLA-2004:813 BUGTRAQ 20040126 Advisory 01/2004: 12 x Gaim remote overflows BUGTRAQ 20040127 Ultramagnetic Advisory #001: Multiple vulnerabilities in Gaim code MISC http://security.e-matters.de/advisories/012004.html GENTOO GLSA-200401-04 CONFIRM http://ultramagnetic.sourceforge.net/advisories/001.html DEBIAN DSA-434 CERT-VN VU#297198 CERT-VN VU#371382 CERT-VN VU#444158 CERT-VN VU#503030 CERT-VN VU#527142 CERT-VN VU#871838 MANDRAKE MDKSA-2004:006 SUSE SuSE-SA:2004:004 REDHAT RHSA-2004:032 REDHAT RHSA-2004:033 REDHAT RHSA-2004:045 BID 9489 SECTRACK 1008850 SLACKWARE SSA:2004-026 XF gaim-yahoowebpending-cookie-bo(14939) XF gaim-login-name-bo(14940) XF gaim-login-value-bo(14941) XF gaim-yahoopacketread-keyname-bo(14943) XF gaim-urlparser-bo(14945) XF gaim-http-proxy-bo(14947) Multiple buffer overflows in Gaim 0.75 and earlier, and Ultramagnetic before 0.81, allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) cookies in a Yahoo web connection, (2) a long name parameter in the Yahoo login web page, (3) a long value parameter in the Yahoo login page, (4) a YMSG packet, (5) the URL parser, and (6) HTTP proxy connect.

cpe:/a:rob_flynn:gaim:0.74 cpe:/a:ultramagnetic:ultramagnetic:0.81

CVE-2004-0007

2004-03-03T00:00:00.000-05:00

2017-10-10T21:29:19.810-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20040126 Advisory 01/2004: 12 x Gaim remote overflows CONECTIVA CLA-2004:813 BUGTRAQ 20040126 Advisory 01/2004: 12 x Gaim remote overflows BUGTRAQ 20040127 Ultramagnetic Advisory #001: Multiple vulnerabilities in Gaim code MISC http://security.e-matters.de/advisories/012004.html GENTOO GLSA-200401-04 CONFIRM http://ultramagnetic.sourceforge.net/advisories/001.html DEBIAN DSA-434 CERT-VN VU#197142 MANDRAKE MDKSA-2004:006 REDHAT RHSA-2004:032 REDHAT RHSA-2004:033 SUSE SuSE-SA:2004:004 BID 9489 SECTRACK 1008850 SLACKWARE SSA:2004-026 XF gaim-extractinfo-bo(14946) Buffer overflow in the Extract Info Field Function for (1) MSN and (2) YMSG protocol handlers in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code.

cpe:/a:rob_flynn:gaim:0.74 cpe:/a:ultramagnetic:ultramagnetic:0.81

CVE-2004-0008

2004-03-03T00:00:00.000-05:00

2017-10-10T21:29:19.870-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SGI 20040201-01-U SGI 20040202-01-U FULLDISC 20040126 Advisory 01/2004: 12 x Gaim remote overflows CONECTIVA CLA-2004:813 BUGTRAQ 20040126 Advisory 01/2004: 12 x Gaim remote overflows BUGTRAQ 20040127 [slackware-security] GAIM security update (SSA:2004-026-01) BUGTRAQ 20040127 Ultramagnetic Advisory #001: Multiple vulnerabilities in Gaim code MISC http://security.e-matters.de/advisories/012004.html GENTOO GLSA-200401-04 CONFIRM http://ultramagnetic.sourceforge.net/advisories/001.html DEBIAN DSA-434 CERT-VN VU#779614 MANDRAKE MDKSA-2004:006 REDHAT RHSA-2004:032 REDHAT RHSA-2004:033 REDHAT RHSA-2004:045 SECTRACK 1008850 XF gaim-directim-bo(14937) Integer overflow in Gaim 0.74 and earlier, and Ultramagnetic before 0.81, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a directIM packet that triggers a heap-based buffer overflow.

cpe:/a:apache-ssl:apache-ssl:1.3.28_1.52

CVE-2004-0009

2004-03-03T00:00:00.000-05:00

2017-10-09T21:30:15.953-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20040206 [apache-ssl] Apache-SSL security advisory - apache_1.3.28+ssl_1.52 and prior BUGTRAQ 20040206 Apache-SSL security advisory - apache_1.3.28+ssl_1.52 and prior CONFIRM http://www.apache-ssl.org/advisory-20040206.txt BID 9590 XF apachessl-default-password(15065) Apache-SSL 1.3.28+1.52 and earlier, with SSLVerifyClient set to 1 or 3 and SSLFakeBasicAuth enabled, allows remote attackers to forge a client certificate by using basic authentication with the "one-line DN" of the target user.

CVE-2004-0010

2004-03-03T00:00:00.000-05:00

2017-10-10T21:29:19.967-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONECTIVA CLA-2004:820 FEDORA FEDORA-2004-079 CIAC O-082 DEBIAN DSA-479 DEBIAN DSA-480 DEBIAN DSA-481 DEBIAN DSA-482 DEBIAN DSA-489 DEBIAN DSA-491 DEBIAN DSA-495 MANDRAKE MDKSA-2004:015 SUSE SuSE-SA:2004:005 REDHAT RHSA-2004:065 REDHAT RHSA-2004:069 REDHAT RHSA-2004:188 TURBO TLSA-2004-05 BID 9691 XF linux-ncplookup-gain-privileges(15250) Stack-based buffer overflow in the ncp_lookup function for ncpfs in Linux kernel 2.4.x allows local users to gain privileges.

cpe:/a:debian:fsp:2.81.b18

CVE-2004-0011

2004-01-20T00:00:00.000-05:00

2017-10-09T21:30:16.017-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CIAC O-048 DEBIAN DSA-416 BID 9377 XF fsp-boundry-error-bo(14155) Buffer overflow in fsp before 2.81.b18 allows remote users to execute arbitrary code.

CVE-2004-0012

2017-05-11T10:29:01.433-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

cpe:/a:jabber_software_foundation:jabber_server:1.4.2a cpe:/a:jabber_software_foundation:jabber_server:1.4.3

CVE-2004-0013

2004-02-03T00:00:00.000-05:00

2017-10-09T21:30:16.063-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov DEBIAN DSA-414 MANDRAKE MDKSA-2004:005 BID 9376 XF jabber-ssl-connections-dos(14158) jabber 1.4.2, 1.4.2a, and possibly earlier versions, does not properly handle SSL connections, which allows remote attackers to cause a denial of service (crash).

cpe:/a:nd:nd:0.8.2

CVE-2004-0014

2004-01-20T00:00:00.000-05:00

2017-07-10T21:29:52.197-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

DEBIAN DSA-412 BID 9365 SECTRACK 1008616 XF nd-long-string-bo(14141) Multiple buffer overflows in the nd WebDAV interface 0.8.2 and earlier allows remote web servers to execute arbitrary code via certain long strings.

cpe:/a:vbox3:vbox3:0.1.8

CVE-2004-0015

2004-02-03T00:00:00.000-05:00

2017-10-09T21:30:16.110-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

DEBIAN DSA-418 BID 9381 XF vbox3-gain-privileges(14170) vbox3 0.1.8 and earlier does not properly drop privileges before executing a user-provided TCL script, which allows local users to gain privileges.

cpe:/a:phpgroupware:phpgroupware:0.9.14

CVE-2004-0016

2004-02-03T00:00:00.000-05:00

2017-10-09T21:30:16.157-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

DEBIAN DSA-419 BID 9387 XF phpgroupware-calendar-file-include(13489) The calendar module for phpgroupware 0.9.14 does not enforce the "save extension" feature for holiday files, which allows remote attackers to create and execute PHP files.

cpe:/a:phpgroupware:phpgroupware:0.9.14

CVE-2004-0017

2004-02-03T00:00:00.000-05:00

2008-09-05T16:37:18.773-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

ALLOWS_OTHER_ACCESS

DEBIAN DSA-419 BID 9386 SECTRACK 1008662 Multiple SQL injection vulnerabilities in the (1) calendar and (2) infolog modules for phpgroupware 0.9.14 allow remote attackers to perform unauthorized database operations.

cpe:/a:samba:jitterbug:1.6.2

CVE-2004-0028

2004-02-03T00:00:00.000-05:00

2017-10-09T21:30:16.203-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

DEBIAN DSA-420 BID 9397 XF jitterbug-execute-code(14207) jitterbug 1.6.2 does not properly sanitize inputs, which allows remote authenticated users to execute arbitrary commands.

cpe:/a:ibm:lotus_domino:6.0.2

CVE-2004-0029

2004-01-20T00:00:00.000-05:00

2017-07-10T21:29:52.260-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040106 Lotus Notes Domino 6.0.2 (linux) faulty default permissions MISC http://www.excluded.org/advisories/advisory05.txt BID 9366 SECTRACK 1008623 XF lotus-notes-insecure-permissions(14153) Lotus Notes Domino 6.0.2 on Linux installs the notes.ini configuration file with world-writable permissions, which allows local users to modify the Notes configuration and gain privileges.

cpe:/a:phpgedview:phpgedview:2.61

CVE-2004-0030

2004-01-20T00:00:00.000-05:00

2017-07-10T21:29:52.323-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040106 Vuln in PHPGEDVIEW 2.61 Multi-Problem BID 9368 SECTRACK 1008632 XF phpgedview-pgvbasedirectory-file-include(14159) PHP remote file inclusion vulnerability in (1) functions.php, (2) authentication_index.php, and (3) config_gedcom.php for PHPGEDVIEW 2.61 allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server that contains the code.

cpe:/a:phpgedview:phpgedview:2.61

CVE-2004-0031

2004-01-20T00:00:00.000-05:00

2017-10-09T21:30:16.267-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040106 Vuln in PHPGEDVIEW 2.61 Multi-Problem XF phpgedview-modify-admin-password(14161) PHPGEDVIEW 2.61 allows remote attackers to reinstall the software and change the administrator password via a direct HTTP request to editconfig.php.

cpe:/a:phpgedview:phpgedview:2.61

CVE-2004-0032

2004-01-20T00:00:00.000-05:00

2017-10-09T21:30:16.343-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040106 Vuln in PHPGEDVIEW 2.61 Multi-Problem BID 9369 XF phpgedview-search-xss(14160) Cross-site scripting (XSS) vulnerability in search.php in PHPGEDVIEW 2.61 allows remote attackers to inject arbitrary HTML and web script via the firstname parameter.

cpe:/a:phpgedview:phpgedview:2.61

CVE-2004-0033

2004-01-20T00:00:00.000-05:00

2017-10-09T21:30:16.407-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040106 Vuln in PHPGEDVIEW 2.61 Multi-Problem BID 9371 XF phpgedview-admin-info-disclosure(14162) admin.php in PHPGEDVIEW 2.61 allows remote attackers to obtain sensitive information via an action parameter with a phpinfo command.

cpe:/a:phorum:phorum:3.4.5

CVE-2004-0034

2004-01-20T00:00:00.000-05:00

2017-07-10T21:29:52.387-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040105 Multiple Vulnerabilities in Phorum 3.4.5 CONFIRM http://phorum.org/ BID 9361 SECTRACK 1008633 XF phorum-common-xss(14145) Multiple cross-site scripting (XSS) vulnerabilities in Phorum 3.4.5 and earlier allow remote attackers to inject arbitrary HTML or web script via (1) the phorum_check_xss function in common.php, (2) the EditError variable in profile.php, and (3) the Error variable in login.php.

cpe:/a:phorum:phorum:3.4.5

CVE-2004-0035

2004-01-20T00:00:00.000-05:00

2017-10-09T21:30:16.453-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040105 Multiple Vulnerabilities in Phorum 3.4.5 BID 9363 XF phorum-register-sql-injection(14146) SQL injection vulnerability in register.php for Phorum 3.4.5 and earlier allows remote attackers to execute arbitrary SQL commands via the hide_email parameter.

cpe:/a:jelsoft:vbulletin:2.3.0

CVE-2004-0036

2004-01-20T00:00:00.000-05:00

2017-10-09T21:30:16.517-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040105 vBulletin Forum 2.3.xx calendar.php SQL Injection BID 9360 CONFIRM http://www.vbulletin.com/forum/showthread.php?postid=588825 XF vbulletin-calendar-sql-injection(14144) SQL injection vulnerability in calendar.php for vBulletin Forum 2.3.x before 2.3.4 allows remote attackers to steal sensitive information via the eventid parameter.

cpe:/a:opentext:opentext_firstclass_desktop_client:7.1

CVE-2004-0037

2004-01-20T00:00:00.000-05:00

2017-07-10T21:29:52.447-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040105 FirstClass Client 7.1: Command Execution via Email Web Link BID 9370 SECTRACK 1008609 XF firstclassclient-execute-code(14151) FirstClass Desktop Client 7.1 allows remote attackers to execute arbitrary commands via hyperlinks in FirstClass RTF messages.

cpe:/a:mcafee:epolicy_orchestrator:2.5 cpe:/a:mcafee:epolicy_orchestrator:2.5:sp1 cpe:/a:mcafee:epolicy_orchestrator:2.5.1 cpe:/a:mcafee:epolicy_orchestrator:3.0 cpe:/a:mcafee:epolicy_orchestrator:3.0:sp2a

CVE-2004-0038

2004-06-14T00:00:00.000-04:00

2017-07-10T21:29:52.510-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://download.nai.com/products/patches/ePO/v2.x/Patch14.txt BID 10200 ISS 20040510 McAfee ePolicy Orchestrator Remote Compromise Vulnerability XF epolicy-execute-commands(14166) McAfee ePolicy Orchestrator (ePO) 2.5.1 Patch 13 and 3.0 SP2a Patch 3 allows remote attackers to execute arbitrary commands via certain HTTP POST requests to the spipe/file handler on ePO TCP port 81.

cpe:/a:checkpoint:firewall-1

CVE-2004-0039

2004-03-03T00:00:00.000-05:00

2017-07-10T21:29:52.557-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040205 Two checkpoint fw-1/vpn-1 vulns CONFIRM http://www.checkpoint.com/techsupport/alerts/security_server.html CIAC O-072 CERT-VN VU#790771 BID 9581 CERT TA04-036A ISS 20040204 Checkpoint Firewall-1 HTTP Parsing Format String Vulnerabilities XF fw1-format-string(14149) Multiple format string vulnerabilities in HTTP Application Intelligence (AI) component in Check Point Firewall-1 NG-AI R55 and R54, and Check Point Firewall-1 HTTP Security Server included with NG FP1, FP2, and FP3 allows remote attackers to execute arbitrary code via HTTP requests that cause format string specifiers to be used in an error message, as demonstrated using the scheme of a URI.

cpe:/a:checkpoint:firewall-1:4.1 cpe:/a:checkpoint:firewall-1:4.1:sp1 cpe:/a:checkpoint:firewall-1:4.1:sp2 cpe:/a:checkpoint:firewall-1:4.1:sp3 cpe:/a:checkpoint:firewall-1:4.1:sp4 cpe:/a:checkpoint:firewall-1:4.1:sp5 cpe:/a:checkpoint:firewall-1:4.1:sp5a cpe:/a:checkpoint:firewall-1:next_generation_fp0 cpe:/a:checkpoint:firewall-1:next_generation_fp1 cpe:/a:checkpoint:vpn-1:4.1:sp5a cpe:/a:checkpoint:vpn-1:next_generation_fp0 cpe:/a:checkpoint:vpn-1:next_generation_fp1

CVE-2004-0040

2004-03-03T00:00:00.000-05:00

2017-10-09T21:30:16.580-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040205 Two checkpoint fw-1/vpn-1 vulns CIAC O-073 CERT-VN VU#873334 BID 9582 ISS 20040204 Checkpoint VPN-1/SecureClient ISAKMP Buffer Overflow XF vpn1-ike-bo(14150) Stack-based buffer overflow in Check Point VPN-1 Server 4.1 through 4.1 SP6 and Check Point SecuRemote/SecureClient 4.1 through 4.1 build 4200 allows remote attackers to execute arbitrary code via an ISAKMP packet with a large Certificate Request packet.

cpe:/a:mod_auth_shadow:mod_auth_shadow:1.0 cpe:/a:mod_auth_shadow:mod_auth_shadow:1.1 cpe:/a:mod_auth_shadow:mod_auth_shadow:1.2 cpe:/a:mod_auth_shadow:mod_auth_shadow:1.3 cpe:/a:mod_auth_shadow:mod_auth_shadow:1.4

CVE-2004-0041

2004-02-03T00:00:00.000-05:00

2008-09-05T16:37:20.947-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

ALLOWS_OTHER_ACCESS

DEBIAN DSA-421 BID 9404 SECTRACK 1008675 The mod_auth_shadow module 1.4 and earlier does not properly enforce the expiration of a user account and password, which could allow remote authenticated users to bypass intended access restrictions.

cpe:/a:beasts:vsftpd:1.1.3

CVE-2004-0042

2004-02-03T00:00:00.000-05:00

2008-09-10T15:24:55.477-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

SECTRACK 1008628 vsftpd 1.1.3 generates different error messages depending on whether or not a valid username exists, which allows remote attackers to identify valid usernames.

cpe:/a:yahoo:messenger:5.6.0.1351

CVE-2004-0043

2004-02-03T00:00:00.000-05:00

2017-07-10T21:29:52.603-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20040108 Yahoo Instant Messenger Long Filename Downloading Buffer Overflow BUGTRAQ 20040108 Yahoo Instant Messenger Long Filename Downloading Buffer Overflow BID 9383 SECTRACK 1008651 XF yahoo-messenger-filename-bo(14171) Buffer overflow in Yahoo Instant Messenger 5.6.0.1351 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long filename in the download feature.

cpe:/a:cisco:personal_assistant:1.4%281%29 cpe:/a:cisco:personal_assistant:1.4%282%29

CVE-2004-0044

2004-02-03T00:00:00.000-05:00

2017-10-09T21:30:16.640-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CISCO 20040108 Cisco Personal Assistant User Password Bypass Vulnerability BID 9384 XF ciscopersonalassistant-config-file-access(14172) Cisco Personal Assistant 1.4(1) and 1.4(2) disables password authentication when "Allow Only Cisco CallManager Users" is enabled and the Corporate Directory settings refer to the directory service being used by Cisco CallManager, which allows remote attackers to gain access with a valid username.

cpe:/a:isc:inn:2.4.0

CVE-2004-0045

2004-02-03T00:00:00.000-05:00

2017-10-09T21:30:16.703-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20040107 [SECURITY] INN: Buffer overflow in control message handling BUGTRAQ 20040108 [OpenPKG-SA-2004.001] OpenPKG Security Advisory (inn) CERT-VN VU#759020 BID 9382 SLACKWARE SSA:2004-014-02 XF inn-artpost-control-message-bo(14190) Buffer overflow in the ARTpost function in art.c in the control message handling code for INN 2.4.0 may allow remote attackers to execute arbitrary code.

CVE-2004-0046

2004-02-03T00:00:00.000-05:00

2017-07-10T21:29:52.667-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040106 SnapStream PVS LITE Cross Site Scripting Vulnerabillity SECTRACK 1008646 BID 9375 XF snapstream-quotation-xss(14164) Cross-site scripting (XSS) vulnerability in SnapStream PVS LITE allows remote attackers to inject arbitrary web script or HTML via a GET request containing a terminating '"' (double quote) character.

cpe:/a:yamamoto_hirotaka:trr19:1.0

CVE-2004-0047

2004-03-03T00:00:00.000-05:00

2017-07-10T21:29:52.713-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

DEBIAN DSA-430 BID 9520 SECTRACK 1008875 XF trr19-gain-privileges(14975) Multiple programs in trr19 1.0 do not properly drop privileges before executing a system command, which could allow local users to gain privileges.

cpe:/a:realnetworks:helix_universal_mobile_server:10.1.1.120 cpe:/a:realnetworks:helix_universal_server:9.0.2.881

CVE-2004-0049

2004-02-17T00:00:00.000-05:00

2008-09-05T16:37:21.993-04:00

6.8

NETWORK

LOW

SINGLE_INSTANCE

NONE

COMPLETE

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

VULNWATCH 20040318 ptl-2004-02: RealNetworks Helix Server 9 Administration Server Buffer Overflow CONFIRM http://service.real.com/help/faq/security/040112_dos/ CONFIRM http://service.real.com/help/faq/security/security022604.html BUGTRAQ 20040318 ptl-2004-02: RealNetworks Helix Server 9 Administration Server Buffer Overflow BID 9421 Helix Universal Server/Proxy 9 and Mobile Server 10 allow remote attackers to cause a denial of service via certain HTTP POST messages to the Administration System port.

cpe:/a:verity:ultraseek:5.2.1

CVE-2004-0050

2004-06-14T00:00:00.000-04:00

2017-07-10T21:29:52.760-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov VULNWATCH 20040505 Corsaire Security Advisory - Verity Ultraseek path disclosure issue FULLDISC 20040505 Corsaire Security Advisory - Verity Ultraseek path disclosure issue BUGTRAQ 20040505 Corsaire Security Advisory - Verity Ultraseek path disclosure issue XF ultraseek-error-path-disclosure(16066) Verity Ultraseek before 5.2.2 allows remote attackers to obtain the full pathname of the document root via an MS-DOS device name in the web search option, such as (1) NUL, (2) CON, (3) AUX, (4) COM1, (5) COM2, and others.

cpe:/a:clearswift:mailsweeper:4.3.7 cpe:/a:clearswift:mailsweeper:4.3.8 cpe:/a:clearswift:mailsweeper:4.3.10 cpe:/a:clearswift:mailsweeper:4.3.11 cpe:/a:clearswift:mailsweeper:4.3.13 cpe:/a:clearswift:mailsweeper:4.3.14 cpe:/a:clearswift:mailsweeper:4.3.15 cpe:/a:f-secure:internet_gatekeeper:6.3 cpe:/a:f-secure:internet_gatekeeper:6.4 cpe:/a:f-secure:internet_gatekeeper:6.31 cpe:/a:f-secure:internet_gatekeeper:6.32 cpe:/a:paul_l_daniels:ripmime:1.2.0 cpe:/a:paul_l_daniels:ripmime:1.2.1 cpe:/a:paul_l_daniels:ripmime:1.2.2 cpe:/a:paul_l_daniels:ripmime:1.2.3 cpe:/a:paul_l_daniels:ripmime:1.2.4 cpe:/a:paul_l_daniels:ripmime:1.2.5 cpe:/a:paul_l_daniels:ripmime:1.2.6 cpe:/a:paul_l_daniels:ripmime:1.2.7 cpe:/a:paul_l_daniels:ripmime:1.3.2.0 cpe:/a:paul_l_daniels:ripmime:1.3.2.2 cpe:/a:paul_l_daniels:ripmime:1.3.2.3

CVE-2004-0051

2004-10-20T00:00:00.000-04:00

2017-07-10T21:29:52.823-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040914 Corsaire Security Advisory - Multiple vendor MIME Content-Transfer-Encoding mechanism issue MISC http://www.uniras.gov.uk/vuls/2004/380375/mime.htm XF mime-contenttransfer-filter-bypass(17337) Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard but frequently supported Content-Transfer-Encoding values such as (1) uuencode, (2) mac-binhex40, and (3) yenc, which may be interpreted differently by mail clients.

CVE-2004-0052

2004-10-20T00:00:00.000-04:00

2017-07-10T21:29:52.887-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040914 Corsaire Security Advisory - Multiple vendor MIME separator issue MISC http://www.uniras.gov.uk/vuls/2004/380375/mime.htm XF mime-separator-filtering-bypass(17334) Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use non-standard separator characters, or use standard separators incorrectly, within MIME headers, fields, parameters, or values, which may be interpreted differently by mail clients.

CVE-2004-0053

2004-10-20T00:00:00.000-04:00

2017-07-10T21:29:52.947-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040914 Corsaire Security Advisory - Multiple vendor MIME RFC2047 encoding issue MISC http://www.uniras.gov.uk/vuls/2004/380375/mime.htm XF mime-rfc2047-filtering-bypass(17331) Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use fields that use RFC2047 encoding, which may be interpreted differently by mail clients.

cpe:/o:cisco:ios:11.3t cpe:/o:cisco:ios:12.0 cpe:/o:cisco:ios:12.0s cpe:/o:cisco:ios:12.0t cpe:/o:cisco:ios:12.1 cpe:/o:cisco:ios:12.1e cpe:/o:cisco:ios:12.1t cpe:/o:cisco:ios:12.2 cpe:/o:cisco:ios:12.2s cpe:/o:cisco:ios:12.2t

CVE-2004-0054

2004-02-17T00:00:00.000-05:00

2017-10-10T21:29:20.027-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CERT CA-2004-01 CISCO 20040113 Vulnerabilities in H.323 Message Processing CERT-VN VU#749342 BID 9406 SECTRACK 1008685 MISC http://www.uniras.gov.uk/vuls/2004/006489/h323.htm Multiple vulnerabilities in the H.323 protocol implementation for Cisco IOS 11.3T through 12.2T allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

cpe:/a:lbl:tcpdump:3.5.2 cpe:/a:lbl:tcpdump:3.6.2 cpe:/a:lbl:tcpdump:3.7 cpe:/a:lbl:tcpdump:3.7.1

CVE-2004-0055

2004-02-17T00:00:00.000-05:00

2017-10-10T21:29:20.120-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CALDERA CSSA-2004-008.0 SCO SCOSA-2004.9 SGI 20040103-01-U SGI 20040202-01-U CONECTIVA CLSA-2003:832 APPLE APPLE-SA-2004-02-23 TRUSTIX 2004-0004 BUGTRAQ 20040131 [FLSA-2004:1222] Updated tcpdump resolves security vulnerabilites (resend with correct paths) MLIST [tcpdump-workers] multiple vulnerabilities in tcpdump 3.8.1 DEBIAN DSA-425 CERT-VN VU#955526 MANDRAKE MDKSA-2004:008 FEDORA FEDORA-2004-090 FEDORA FEDORA-2004-092 MLIST [fedora-announce-list] 20040311 Re: [SECURITY] Fedora Core 1 Update: tcpdump-3.7.2-8.fc1.1 FEDORA FLSA:1222 REDHAT RHSA-2004:008 BID 7090 SECTRACK 1008735 The print_attr_string function in print-radius.c for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via a RADIUS attribute with a large length value.

cpe:/a:nortel:business_communications_manager cpe:/h:nortel:802.11_wireless_ip_gateway cpe:/h:nortel:succession_communication_server_1000

CVE-2004-0056

2004-02-17T00:00:00.000-05:00

2008-09-05T16:37:23.210-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

ALLOWS_OTHER_ACCESS

CERT CA-2004-01 CERT-VN VU#749342 BID 9406 SECTRACK 1008687 MISC http://www.uniras.gov.uk/vuls/2004/006489/h323.htm Multiple vulnerabilities in the H.323 protocol implementation for Nortel Networks Business Communications Manager (BCM), Succession 1000 IP Trunk and IP Peer Networking, and 802.11 Wireless IP Gateway allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

cpe:/a:lbl:tcpdump:3.8.1

CVE-2004-0057

2004-02-17T00:00:00.000-05:00

2018-10-19T11:29:57.110-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CALDERA CSSA-2004-008.0 SCO SCOSA-2004.9 SGI 20040103-01-U SGI 20040202-01-U APPLE APPLE-SA-2004-02-23 TRUSTIX 2004-0004 ENGARDE ESA-20040119-002 BUGTRAQ 20040131 [FLSA-2004:1222] Updated tcpdump resolves security vulnerabilites (resend with correct paths) MLIST [tcpdump-workers] multiple vulnerabilities in tcpdump 3.8.1 DEBIAN DSA-425 CERT-VN VU#174086 MANDRAKE MDKSA-2004:008 FEDORA FEDORA-2004-090 FEDORA FEDORA-2004-092 MLIST [fedora-announce-list] 20040311 Re: [SECURITY] Fedora Core 1 Update: tcpdump-3.7.2-8.fc1.1 FEDORA FLSA:1222 REDHAT RHSA-2004:007 REDHAT RHSA-2004:008 BUGTRAQ 20040119 [ESA-20040119-002] 'tcpdump' multiple vulnerabilities. BID 9423 SECTRACK 1008716 XF tcpdump-rawprint-isakmp-dos(14837) The rawprint function in the ISAKMP decoding routines (print-isakmp.c) for tcpdump 3.8.1 and earlier allows remote attackers to cause a denial of service (segmentation fault) via malformed ISAKMP packets that cause invalid "len" or "loc" values to be used in a loop, a different vulnerability than CVE-2003-0989.

cpe:/o:linux:linux_kernel:2.0.9.9

CVE-2004-0058

2004-02-17T00:00:00.000-05:00

2017-07-10T21:29:53.087-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040113 symlink vul for Antivir / Linux Version 2.0.9-9 (maybe lower) SECTRACK 1008702 XF antivir-tmpfile-insecure(14214) Antivir / Linux 2.0.9-9, and possibly earlier versions, allows local users to overwrite arbitrary files via a symlink attack on the .pid_antivir_$$ temporary file.

cpe:/a:lionmax_software:www_file_share_pro:2.42

CVE-2004-0059

2004-02-17T00:00:00.000-05:00

2016-10-17T22:40:19.910-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040114 Multiple vulnerabilities in WWW Fileshare Pro <= 2.42 SECTRACK 1008779 Directory traversal vulnerability in upload capability of WWW File Share Pro 2.42 and earlier allows remote attackers to overwrite arbitrary files via .. (dot dot) sequences in the filename parameter of a Content-Disposition: header.

cpe:/a:lionmax_software:www_file_share_pro:2.42

CVE-2004-0060

2004-02-17T00:00:00.000-05:00

2016-10-17T22:40:21.147-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040114 Multiple vulnerabilities in WWW Fileshare Pro <= 2.42 SECTRACK 1008779 WWW File Share Pro 2.42 and earlier allows remote attackers to cause a denial of service (crash) via a large POST request.

cpe:/a:lionmax_software:www_file_share_pro:2.42

CVE-2004-0061

2004-02-17T00:00:00.000-05:00

2016-10-17T22:40:22.583-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040114 Multiple vulnerabilities in WWW Fileshare Pro <= 2.42 SECTRACK 1008779 WWW File Share Pro 2.42 and earlier allows remote attackers to bypass directory access restrictions via (1) a URL with a trailing . (dot), or (2) a URI with a leading slash or backslash character.

cpe:/a:fishnet:fishcart:3.1

CVE-2004-0062

2004-02-17T00:00:00.000-05:00

2016-10-17T22:40:23.707-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040114 FishCart Integer Overflow / Rounding Error SECTRACK 1008731 Integer overflow in the rnd arithmetic rounding function for various versions of FishCart before 3.1 allows remote attackers to "cause negative totals" via an order with a large quantity.

cpe:/a:ncipher:payshield_spp_library:1.3.12 cpe:/a:ncipher:payshield_spp_library:1.5.18 cpe:/a:ncipher:payshield_spp_library:1.6.18

CVE-2004-0063

2004-02-17T00:00:00.000-05:00

2017-10-09T21:30:16.767-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040114 nCipher Advisory #8: payShield library may verify bad requests CONFIRM http://www.ncipher.com/support/advisories/advisory8_payshield.html BID 9422 XF payshield-incorrect-request-verification(14832) The SPP_VerifyPVV function in nCipher payShield SPP library 1.3.12, 1.5.18 and 1.6.18 returns a Status_OK value even if the HSM returns a different status code, which could cause applications to make incorrect security-critical decisions, e.g. by accepting an invalid PIN number.

cpe:/o:suse:suse_linux:9.0

CVE-2004-0064

2004-02-17T00:00:00.000-05:00

2016-10-17T22:40:26.850-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040113 SuSE linux 9.0 YaST config Skribt [exploit] BID 9411 SECTRACK 1008703 The SuSEconfig.gnome-filesystem script for YaST in SuSE 9.0 allows local users to overwrite arbitrary files via a symlink attack on files within the tmp.SuSEconfig.gnome-filesystem.$RANDOM temporary directory.

cpe:/a:phpgedview:phpgedview:2.65

CVE-2004-0065

2004-02-17T00:00:00.000-05:00

2016-10-17T22:40:28.067-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040112 More phpGedView Vulnerabilities BID 11910 BID 11925 Multiple SQL injection vulnerabilities in phpGedView before 2.65 allow remote attackers to execute arbitrary SQL via (1) timeline.php and (2) placelist.php.

cpe:/a:phpgedview:phpgedview:2.65

CVE-2004-0066

2004-02-17T00:00:00.000-05:00

2017-07-10T21:29:53.150-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040112 More phpGedView Vulnerabilities XF phpgedview-path-disclosure(14215) phpGedView before 2.65 allows remote attackers to obtain the absolute path of the web server via malformed parameters to (1) indilist.php, (2) famlist.php, (3) placelist.php, (4) imageview.php, (5) timeline.php, (6) clippings.php, (7) login.php, and (8) gdbi.php.

cpe:/a:phpgedview:phpgedview:2.65

CVE-2004-0067

2004-02-17T00:00:00.000-05:00

2018-10-19T11:30:03.563-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040112 More phpGedView Vulnerabilities SECTRACK 1018613 BUGTRAQ 20070827 PhpGedView login page multiple XSS BID 11868 BID 11880 BID 11882 BID 11888 BID 11890 BID 11891 BID 11894 BID 11903 BID 11904 BID 11905 BID 11906 BID 11907 VUPEN ADV-2007-2995 XF phpgedview-multiple-xss(14212) XF phpgedview-login-xss(36285) Multiple cross-site scripting (XSS) vulnerabilities in phpGedView before 2.65 allow remote attackers to inject arbitrary HTML or web script via (1) descendancy.php, (2) index.php, (3) individual.php, (4) login.php, (5) relationship.php, (6) source.php, (7) imageview.php, (8) calendar.php, (9) gedrecord.php, (10) login.php, and (11) gdbi_interface.php. NOTE: some aspects of vector 10 were later reported to affect 4.1.

cpe:/a:phpdig.net:phpdig:1.6.5

CVE-2004-0068

2004-02-17T00:00:00.000-05:00

2017-10-09T21:30:16.813-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040114 PhpDig 1.6.x: remote command execution CONFIRM http://www.phpdig.net/showthread.php?s=58bcc71c822830ec3bbdaae6d56846e0&threadid=393 BID 9424 XF phpdig-config-file-include(14826) PHP remote file inclusion vulnerability in config.php for PhpDig 1.6.5 and earlier allows remote attackers to execute arbitrary PHP code by modifying the $relative_script_path parameter to reference a URL on a remote web server that contains the code.

cpe:/a:hd_soft:windows_ftp_server:1.6

CVE-2004-0069

2004-02-17T00:00:00.000-05:00

2016-10-17T22:40:33.350-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040108 Windows FTP Server Format String Vulnerability BUGTRAQ 20040113 exploit for HD Soft Windows FTP Server 1.6 BID 9385 SECTRACK 1008658 Format string vulnerability in HD Soft Windows FTP Server 1.6 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username, which is processed by the wscanf function.

cpe:/a:visualshapers:ezcontents

CVE-2004-0070

2004-02-17T00:00:00.000-05:00

2017-10-09T21:30:16.877-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040110 Remote Code Execution in ezContents CONFIRM http://www.ezcontents.org/forum/viewtopic.php?t=361 BID 9396 XF ezcontents-php-file-include(14199) PHP remote file inclusion vulnerability in module.php for ezContents allows remote attackers to execute arbitrary PHP code by modifying the link parameter to reference a URL on a remote web server that contains the code.

CVE-2004-0071

2004-02-17T00:00:00.000-05:00

2017-07-10T21:29:53.290-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040110 PHP Manpage lookup directory transversal / file disclosing BID 9395 SECTRACK 1008689 XF manpagelookup-directory-traversal(14203) Directory traversal vulnerability in buildManPage in class.manpagelookup.php for PHP Man Page Lookup 1.2.0 allows remote attackers to read arbitrary files via the command parameter ($cmd variable) to index.php.

cpe:/a:accipiter:accipiter_direct_server:6.0

CVE-2004-0072

2004-02-17T00:00:00.000-05:00

2017-07-10T21:29:53.353-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20040109 Directory Traversal in Accipiter Direct Server 6.0 BUGTRAQ 20040109 Directory Traversal in Accipiter Direct Server 6.0 BID 9389 XF accipterdirectserver-directory-traversal(14198) Directory traversal vulnerability in Accipiter Direct Server 6.0 allows remote attackers to read arbitrary files via encoded \.. (backslash .., "%5c%2e%2e") sequences in an HTTP request.

cpe:/a:stoitsov:easydynamicpages:2.0

CVE-2004-0073

2004-02-17T00:00:00.000-05:00

2017-07-10T21:29:53.417-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040102 include() vuln in EasyDynamicPages v.2.0 SECTRACK 1008584 BID 9338 XF easydynamicpages-php-file-include(14136) PHP remote file inclusion vulnerability in (1) config.php and (2) config_page.php for EasyDynamicPages 2.0 allows remote attackers to execute arbitrary PHP code by modifying the edp_relative_path parameter to reference a URL on a remote web server that contains a malicious serverdata.php script.

cpe:/a:michael_bischoff:xsok:1.02

CVE-2004-0074

2004-02-17T00:00:00.000-05:00

2017-07-10T21:29:53.480-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040102 xsok local games exploit BUGTRAQ 20040103 xsok local games exploit (2) BID 9341 BID 9352 XF xsok-long-xsokdir-bo(14906) XF xsok-lang-bo(14910) Multiple buffer overflows in xsok 1.02 allows local users to gain privileges via (1) a long LANG environment variable, or (2) a long -xsokdir command line argument, a different vulnerability than CVE-2003-0949.

CVE-2004-0075

2004-03-15T00:00:00.000-05:00

2017-10-09T21:30:16.953-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2004:846 MANDRAKE MDKSA-2004:015 CIAC O-082 SUSE SuSE-SA:2004:005 REDHAT RHSA-2004:065 REDHAT RHSA-2005:293 BID 9690 XF linux-vicam-dos(15246) The Vicam USB driver in Linux before 2.4.25 does not use the copy_from_user function when copying data from userspace to kernel space, which crosses security boundaries and allows local users to cause a denial of service.

CVE-2004-0076

2004-08-18T00:00:00.000-04:00

2008-09-10T15:25:02.070-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was removed from consideration by its Candidate Numbering Authority. Notes: none.

cpe:/a:redhat:bigmem_kernel:2.4.20-8::i686 cpe:/a:redhat:kernel:2.4.20-8::athlon cpe:/a:redhat:kernel:2.4.20-8::athlon_smp cpe:/a:redhat:kernel:2.4.20-8::i386 cpe:/a:redhat:kernel:2.4.20-8::i686 cpe:/a:redhat:kernel:2.4.20-8::i686_smp cpe:/a:redhat:kernel_doc:2.4.20-8::i386 cpe:/a:redhat:kernel_source:2.4.20-8::i386_src cpe:/o:linux:linux_kernel:2.2.0 cpe:/o:linux:linux_kernel:2.2.1 cpe:/o:linux:linux_kernel:2.2.2 cpe:/o:linux:linux_kernel:2.2.3 cpe:/o:linux:linux_kernel:2.2.4 cpe:/o:linux:linux_kernel:2.2.5 cpe:/o:linux:linux_kernel:2.2.6 cpe:/o:linux:linux_kernel:2.2.7 cpe:/o:linux:linux_kernel:2.2.8 cpe:/o:linux:linux_kernel:2.2.9 cpe:/o:linux:linux_kernel:2.2.10 cpe:/o:linux:linux_kernel:2.2.11 cpe:/o:linux:linux_kernel:2.2.12 cpe:/o:linux:linux_kernel:2.2.13 cpe:/o:linux:linux_kernel:2.2.14 cpe:/o:linux:linux_kernel:2.2.15 cpe:/o:linux:linux_kernel:2.2.15:pre16 cpe:/o:linux:linux_kernel:2.2.15_pre20 cpe:/o:linux:linux_kernel:2.2.16 cpe:/o:linux:linux_kernel:2.2.16:pre6 cpe:/o:linux:linux_kernel:2.2.17 cpe:/o:linux:linux_kernel:2.2.18 cpe:/o:linux:linux_kernel:2.2.19 cpe:/o:linux:linux_kernel:2.2.20 cpe:/o:linux:linux_kernel:2.2.21 cpe:/o:linux:linux_kernel:2.2.22 cpe:/o:linux:linux_kernel:2.2.23 cpe:/o:linux:linux_kernel:2.2.24 cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.4.0:test1 cpe:/o:linux:linux_kernel:2.4.0:test10 cpe:/o:linux:linux_kernel:2.4.0:test11 cpe:/o:linux:linux_kernel:2.4.0:test12 cpe:/o:linux:linux_kernel:2.4.0:test2 cpe:/o:linux:linux_kernel:2.4.0:test3 cpe:/o:linux:linux_kernel:2.4.0:test4 cpe:/o:linux:linux_kernel:2.4.0:test5 cpe:/o:linux:linux_kernel:2.4.0:test6 cpe:/o:linux:linux_kernel:2.4.0:test7 cpe:/o:linux:linux_kernel:2.4.0:test8 cpe:/o:linux:linux_kernel:2.4.0:test9 cpe:/o:linux:linux_kernel:2.4.1 cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:linux:linux_kernel:2.4.3 cpe:/o:linux:linux_kernel:2.4.4 cpe:/o:linux:linux_kernel:2.4.5 cpe:/o:linux:linux_kernel:2.4.6 cpe:/o:linux:linux_kernel:2.4.7 cpe:/o:linux:linux_kernel:2.4.8 cpe:/o:linux:linux_kernel:2.4.9 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.18::x86 cpe:/o:linux:linux_kernel:2.4.18:pre1 cpe:/o:linux:linux_kernel:2.4.18:pre2 cpe:/o:linux:linux_kernel:2.4.18:pre3 cpe:/o:linux:linux_kernel:2.4.18:pre4 cpe:/o:linux:linux_kernel:2.4.18:pre5 cpe:/o:linux:linux_kernel:2.4.18:pre6 cpe:/o:linux:linux_kernel:2.4.18:pre7 cpe:/o:linux:linux_kernel:2.4.18:pre8 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.19:pre1 cpe:/o:linux:linux_kernel:2.4.19:pre2 cpe:/o:linux:linux_kernel:2.4.19:pre3 cpe:/o:linux:linux_kernel:2.4.19:pre4 cpe:/o:linux:linux_kernel:2.4.19:pre5 cpe:/o:linux:linux_kernel:2.4.19:pre6 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.21:pre1 cpe:/o:linux:linux_kernel:2.4.21:pre4 cpe:/o:linux:linux_kernel:2.4.21:pre7 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.23:pre9 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.0:test1 cpe:/o:linux:linux_kernel:2.6.0:test10 cpe:/o:linux:linux_kernel:2.6.0:test11 cpe:/o:linux:linux_kernel:2.6.0:test2 cpe:/o:linux:linux_kernel:2.6.0:test3 cpe:/o:linux:linux_kernel:2.6.0:test4 cpe:/o:linux:linux_kernel:2.6.0:test5 cpe:/o:linux:linux_kernel:2.6.0:test6 cpe:/o:linux:linux_kernel:2.6.0:test7 cpe:/o:linux:linux_kernel:2.6.0:test8 cpe:/o:linux:linux_kernel:2.6.0:test9 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6_test9_cvs cpe:/o:netwosix:netwosix_linux:1.0 cpe:/o:trustix:secure_linux:1.5 cpe:/o:trustix:secure_linux:2.0

CVE-2004-0077

2004-03-03T00:00:00.000-05:00

2018-05-02T21:29:23.817-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

VULNWATCH 20040218 Second critical mremap() bug found in all Linux kernels CONECTIVA CLA-2004:820 FEDORA FEDORA-2004-079 MANDRAKE MDKSA-2004:015 MISC http://isec.pl/vulnerabilities/isec-0014-mremap-unmap.txt BUGTRAQ 20040218 Second critical mremap() bug found in all Linux kernels TRUSTIX 2004-0007 TRUSTIX 2004-0008 GENTOO GLSA-200403-02 CIAC O-082 DEBIAN DSA-438 DEBIAN DSA-439 DEBIAN DSA-440 DEBIAN DSA-441 DEBIAN DSA-442 DEBIAN DSA-444 DEBIAN DSA-450 DEBIAN DSA-453 DEBIAN DSA-454 DEBIAN DSA-456 DEBIAN DSA-466 DEBIAN DSA-470 DEBIAN DSA-475 DEBIAN DSA-514 CERT-VN VU#981222 SUSE SuSE-SA:2004:005 REDHAT RHSA-2004:065 REDHAT RHSA-2004:066 REDHAT RHSA-2004:069 REDHAT RHSA-2004:106 BID 9686 SLACKWARE SSA:2004-049 XF linux-mremap-gain-privileges(15244) The do_mremap function for the mremap system call in Linux 2.2 to 2.2.25, 2.4 to 2.4.24, and 2.6 to 2.6.2, does not properly check the return value from the do_munmap function when the maximum number of VMA descriptors is exceeded, which allows local users to gain root privileges, a different vulnerability than CAN-2003-0985.

cpe:/a:mutt:mutt:1.2.1 cpe:/a:mutt:mutt:1.2.5 cpe:/a:mutt:mutt:1.2.5.1 cpe:/a:mutt:mutt:1.2.5.4 cpe:/a:mutt:mutt:1.2.5.5 cpe:/a:mutt:mutt:1.2.5.12 cpe:/a:mutt:mutt:1.2.5.12_ol cpe:/a:mutt:mutt:1.3.12 cpe:/a:mutt:mutt:1.3.12.1 cpe:/a:mutt:mutt:1.3.16 cpe:/a:mutt:mutt:1.3.17 cpe:/a:mutt:mutt:1.3.22 cpe:/a:mutt:mutt:1.3.24 cpe:/a:mutt:mutt:1.3.25 cpe:/a:mutt:mutt:1.3.27 cpe:/a:mutt:mutt:1.3.28 cpe:/a:mutt:mutt:1.4.0 cpe:/a:mutt:mutt:1.4.1

CVE-2004-0078

2004-03-03T00:00:00.000-05:00

2017-10-09T21:30:17.047-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CALDERA CSSA-2004-013.0 CONFIRM http://bugs.debian.org/126336 BUGTRAQ 20040211 Mutt-1.4.2 fixes buffer overflow. BUGTRAQ 20040215 LNSA-#2004-0001: mutt remote crash BUGTRAQ 20040309 [OpenPKG-SA-2004.005] OpenPKG Security Advisory (mutt) MANDRAKE MDKSA-2004:010 REDHAT RHSA-2004:050 REDHAT RHSA-2004:051 BID 9641 SLACKWARE SSA:2004-043 XF mutt-index-menu-bo(15134) Buffer overflow in the index menu code (menu_pad_string of menu.c) for Mutt 1.4.1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via certain mail messages.

cpe:/a:4d:webstar:4.0 cpe:/a:4d:webstar:5.2 cpe:/a:4d:webstar:5.2.1 cpe:/a:4d:webstar:5.2.2 cpe:/a:4d:webstar:5.2.3 cpe:/a:4d:webstar:5.2.4 cpe:/a:4d:webstar:5.3 cpe:/a:4d:webstar:5.3.1 cpe:/a:avaya:intuity_audix:::lx cpe:/a:avaya:intuity_audix:5.1.46 cpe:/a:avaya:intuity_audix:s3210 cpe:/a:avaya:intuity_audix:s3400 cpe:/a:avaya:vsu:5 cpe:/a:avaya:vsu:5x cpe:/a:avaya:vsu:100_r2.0.1 cpe:/a:avaya:vsu:500 cpe:/a:avaya:vsu:2000_r2.0.1 cpe:/a:avaya:vsu:5000_r2.0.1 cpe:/a:avaya:vsu:7500_r2.0.1 cpe:/a:avaya:vsu:10000_r2.0.1 cpe:/a:checkpoint:firewall-1:::vsx-ng-ai cpe:/a:checkpoint:firewall-1:2.0::gx cpe:/a:checkpoint:firewall-1:next_generation_fp0 cpe:/a:checkpoint:firewall-1:next_generation_fp1 cpe:/a:checkpoint:firewall-1:next_generation_fp2 cpe:/a:checkpoint:provider-1:4.1 cpe:/a:checkpoint:provider-1:4.1:sp1 cpe:/a:checkpoint:provider-1:4.1:sp2 cpe:/a:checkpoint:provider-1:4.1:sp3 cpe:/a:checkpoint:provider-1:4.1:sp4 cpe:/a:checkpoint:vpn-1:next_generation_fp0 cpe:/a:checkpoint:vpn-1:next_generation_fp1 cpe:/a:checkpoint:vpn-1:next_generation_fp2 cpe:/a:checkpoint:vpn-1:vsx_ng_with_application_intelligence cpe:/a:cisco:access_registrar cpe:/a:cisco:application_and_content_networking_software cpe:/a:cisco:ciscoworks_common_management_foundation:2.1 cpe:/a:cisco:ciscoworks_common_services:2.2 cpe:/a:cisco:css11000_content_services_switch cpe:/a:cisco:css_secure_content_accelerator:1.0 cpe:/a:cisco:css_secure_content_accelerator:2.0 cpe:/a:cisco:okena_stormwatch:3.2 cpe:/a:cisco:pix_firewall:6.2.2_.111 cpe:/a:cisco:threat_response cpe:/a:cisco:webns:6.10 cpe:/a:cisco:webns:6.10_b4 cpe:/a:cisco:webns:7.1_0.1.02 cpe:/a:cisco:webns:7.1_0.2.06 cpe:/a:cisco:webns:7.2_0.0.03 cpe:/a:cisco:webns:7.10 cpe:/a:cisco:webns:7.10_.0.06s cpe:/a:hp:wbem:a.01.05.08 cpe:/a:hp:wbem:a.02.00.00 cpe:/a:hp:wbem:a.02.00.01 cpe:/a:lite:speed_technologies_litespeed_web_server:1.0.1 cpe:/a:lite:speed_technologies_litespeed_web_server:1.0.2 cpe:/a:lite:speed_technologies_litespeed_web_server:1.0.3 cpe:/a:lite:speed_technologies_litespeed_web_server:1.1 cpe:/a:lite:speed_technologies_litespeed_web_server:1.1.1 cpe:/a:lite:speed_technologies_litespeed_web_server:1.2.1 cpe:/a:lite:speed_technologies_litespeed_web_server:1.2.2 cpe:/a:lite:speed_technologies_litespeed_web_server:1.2_rc1 cpe:/a:lite:speed_technologies_litespeed_web_server:1.2_rc2 cpe:/a:lite:speed_technologies_litespeed_web_server:1.3 cpe:/a:lite:speed_technologies_litespeed_web_server:1.3.1 cpe:/a:lite:speed_technologies_litespeed_web_server:1.3_rc1 cpe:/a:lite:speed_technologies_litespeed_web_server:1.3_rc2 cpe:/a:lite:speed_technologies_litespeed_web_server:1.3_rc3 cpe:/a:neoteris:instant_virtual_extranet:3.0 cpe:/a:neoteris:instant_virtual_extranet:3.1 cpe:/a:neoteris:instant_virtual_extranet:3.2 cpe:/a:neoteris:instant_virtual_extranet:3.3 cpe:/a:neoteris:instant_virtual_extranet:3.3.1 cpe:/a:novell:edirectory:8.0 cpe:/a:novell:edirectory:8.5 cpe:/a:novell:edirectory:8.5.12a cpe:/a:novell:edirectory:8.5.27 cpe:/a:novell:edirectory:8.6.2 cpe:/a:novell:edirectory:8.7 cpe:/a:novell:edirectory:8.7.1 cpe:/a:novell:edirectory:8.7.1:sp1 cpe:/a:novell:imanager:1.5 cpe:/a:novell:imanager:2.0 cpe:/a:openssl:openssl:0.9.6c cpe:/a:openssl:openssl:0.9.6d cpe:/a:openssl:openssl:0.9.6e cpe:/a:openssl:openssl:0.9.6f cpe:/a:openssl:openssl:0.9.6g cpe:/a:openssl:openssl:0.9.6h cpe:/a:openssl:openssl:0.9.6i cpe:/a:openssl:openssl:0.9.6j cpe:/a:openssl:openssl:0.9.6k cpe:/a:openssl:openssl:0.9.7 cpe:/a:openssl:openssl:0.9.7:beta1 cpe:/a:openssl:openssl:0.9.7:beta2 cpe:/a:openssl:openssl:0.9.7:beta3 cpe:/a:openssl:openssl:0.9.7a cpe:/a:openssl:openssl:0.9.7b cpe:/a:openssl:openssl:0.9.7c cpe:/a:redhat:openssl:0.9.6-15::i386 cpe:/a:redhat:openssl:0.9.6b-3::i386 cpe:/a:redhat:openssl:0.9.7a-2::i386 cpe:/a:redhat:openssl:0.9.7a-2::i386_dev cpe:/a:redhat:openssl:0.9.7a-2::i386_perl cpe:/a:rsa:bsafe_ssl-j_sdk:3.0 cpe:/a:rsa:bsafe_ssl-j_sdk:3.0.1 cpe:/a:rsa:bsafe_ssl-j_sdk:3.1 cpe:/a:sgi:propack:2.3 cpe:/a:sgi:propack:2.4 cpe:/a:sgi:propack:3.0 cpe:/a:stonesoft:servercluster:2.5 cpe:/a:stonesoft:servercluster:2.5.2 cpe:/a:stonesoft:stonebeat_fullcluster:1_2.0 cpe:/a:stonesoft:stonebeat_fullcluster:1_3.0 cpe:/a:stonesoft:stonebeat_fullcluster:2.0 cpe:/a:stonesoft:stonebeat_fullcluster:2.5 cpe:/a:stonesoft:stonebeat_fullcluster:3.0 cpe:/a:stonesoft:stonebeat_securitycluster:2.0 cpe:/a:stonesoft:stonebeat_securitycluster:2.5 cpe:/a:stonesoft:stonebeat_webcluster:2.0 cpe:/a:stonesoft:stonebeat_webcluster:2.5 cpe:/a:stonesoft:stonegate:1.5.17 cpe:/a:stonesoft:stonegate:1.5.18 cpe:/a:stonesoft:stonegate:1.6.2 cpe:/a:stonesoft:stonegate:1.6.3 cpe:/a:stonesoft:stonegate:1.7 cpe:/a:stonesoft:stonegate:1.7.1 cpe:/a:stonesoft:stonegate:1.7.2 cpe:/a:stonesoft:stonegate:2.0.1 cpe:/a:stonesoft:stonegate:2.0.4 cpe:/a:stonesoft:stonegate:2.0.5 cpe:/a:stonesoft:stonegate:2.0.6 cpe:/a:stonesoft:stonegate:2.0.7 cpe:/a:stonesoft:stonegate:2.0.8 cpe:/a:stonesoft:stonegate:2.0.9 cpe:/a:stonesoft:stonegate:2.1 cpe:/a:stonesoft:stonegate:2.2 cpe:/a:stonesoft:stonegate:2.2.1 cpe:/a:stonesoft:stonegate:2.2.4 cpe:/a:stonesoft:stonegate_vpn_client:1.7 cpe:/a:stonesoft:stonegate_vpn_client:1.7.2 cpe:/a:stonesoft:stonegate_vpn_client:2.0 cpe:/a:stonesoft:stonegate_vpn_client:2.0.7 cpe:/a:stonesoft:stonegate_vpn_client:2.0.8 cpe:/a:stonesoft:stonegate_vpn_client:2.0.9 cpe:/a:tarantella:tarantella_enterprise:3.20 cpe:/a:tarantella:tarantella_enterprise:3.30 cpe:/a:tarantella:tarantella_enterprise:3.40 cpe:/a:vmware:gsx_server:2.0 cpe:/a:vmware:gsx_server:2.0.1_build_2129 cpe:/a:vmware:gsx_server:2.5.1 cpe:/a:vmware:gsx_server:2.5.1_build_5336 cpe:/a:vmware:gsx_server:3.0_build_7592 cpe:/h:avaya:converged_communications_server:2.0 cpe:/h:avaya:s8300:r2.0.0 cpe:/h:avaya:s8300:r2.0.1 cpe:/h:avaya:s8500:r2.0.0 cpe:/h:avaya:s8500:r2.0.1 cpe:/h:avaya:s8700:r2.0.0 cpe:/h:avaya:s8700:r2.0.1 cpe:/h:avaya:sg200:4.4 cpe:/h:avaya:sg200:4.31.29 cpe:/h:avaya:sg203:4.4 cpe:/h:avaya:sg203:4.31.29 cpe:/h:avaya:sg208 cpe:/h:avaya:sg208:4.4 cpe:/h:avaya:sg5:4.2 cpe:/h:avaya:sg5:4.3 cpe:/h:avaya:sg5:4.4 cpe:/h:bluecoat:proxysg cpe:/h:cisco:call_manager cpe:/h:cisco:content_services_switch_11500 cpe:/h:cisco:firewall_services_module cpe:/h:cisco:firewall_services_module:1.1.2 cpe:/h:cisco:firewall_services_module:1.1.3 cpe:/h:cisco:firewall_services_module:1.1_%283.005%29 cpe:/h:cisco:firewall_services_module:2.1_%280.208%29 cpe:/h:cisco:gss_4480_global_site_selector cpe:/h:cisco:gss_4490_global_site_selector cpe:/h:cisco:mds_9000 cpe:/h:cisco:secure_content_accelerator:10000 cpe:/h:hp:aaa_server cpe:/h:hp:apache-based_web_server:2.0.43.00 cpe:/h:hp:apache-based_web_server:2.0.43.04 cpe:/h:securecomputing:sidewinder:5.2 cpe:/h:securecomputing:sidewinder:5.2.0.01 cpe:/h:securecomputing:sidewinder:5.2.0.02 cpe:/h:securecomputing:sidewinder:5.2.0.03 cpe:/h:securecomputing:sidewinder:5.2.0.04 cpe:/h:securecomputing:sidewinder:5.2.1 cpe:/h:securecomputing:sidewinder:5.2.1.02 cpe:/h:sun:crypto_accelerator_4000:1.0 cpe:/h:symantec:clientless_vpn_gateway_4400:5.0 cpe:/o:apple:mac_os_x:10.3.3 cpe:/o:apple:mac_os_x_server:10.3.3 cpe:/o:bluecoat:cacheos_ca_sa:4.1.10 cpe:/o:bluecoat:cacheos_ca_sa:4.1.12 cpe:/o:cisco:ios:12.1%2811%29e cpe:/o:cisco:ios:12.1%2811b%29e cpe:/o:cisco:ios:12.1%2811b%29e12 cpe:/o:cisco:ios:12.1%2811b%29e14 cpe:/o:cisco:ios:12.1%2813%29e9 cpe:/o:cisco:ios:12.1%2819%29e1 cpe:/o:cisco:ios:12.2%2814%29sy cpe:/o:cisco:ios:12.2%2814%29sy1 cpe:/o:cisco:ios:12.2sy cpe:/o:cisco:ios:12.2za cpe:/o:cisco:pix_firewall_software:6.0 cpe:/o:cisco:pix_firewall_software:6.0%281%29 cpe:/o:cisco:pix_firewall_software:6.0%282%29 cpe:/o:cisco:pix_firewall_software:6.0%283%29 cpe:/o:cisco:pix_firewall_software:6.0%284%29 cpe:/o:cisco:pix_firewall_software:6.0%284.101%29 cpe:/o:cisco:pix_firewall_software:6.1 cpe:/o:cisco:pix_firewall_software:6.1%281%29 cpe:/o:cisco:pix_firewall_software:6.1%282%29 cpe:/o:cisco:pix_firewall_software:6.1%283%29 cpe:/o:cisco:pix_firewall_software:6.1%284%29 cpe:/o:cisco:pix_firewall_software:6.1%285%29 cpe:/o:cisco:pix_firewall_software:6.2 cpe:/o:cisco:pix_firewall_software:6.2%281%29 cpe:/o:cisco:pix_firewall_software:6.2%282%29 cpe:/o:cisco:pix_firewall_software:6.2%283%29 cpe:/o:cisco:pix_firewall_software:6.2%283.100%29 cpe:/o:cisco:pix_firewall_software:6.3 cpe:/o:cisco:pix_firewall_software:6.3%281%29 cpe:/o:cisco:pix_firewall_software:6.3%282%29 cpe:/o:cisco:pix_firewall_software:6.3%283.102%29 cpe:/o:cisco:pix_firewall_software:6.3%283.109%29 cpe:/o:freebsd:freebsd:4.8 cpe:/o:freebsd:freebsd:4.8:releng cpe:/o:freebsd:freebsd:4.9 cpe:/o:freebsd:freebsd:5.1 cpe:/o:freebsd:freebsd:5.1:release cpe:/o:freebsd:freebsd:5.1:releng cpe:/o:freebsd:freebsd:5.2 cpe:/o:freebsd:freebsd:5.2.1:release cpe:/o:hp:hp-ux:8.05 cpe:/o:hp:hp-ux:11.00 cpe:/o:hp:hp-ux:11.11 cpe:/o:hp:hp-ux:11.23 cpe:/o:openbsd:openbsd:3.3 cpe:/o:openbsd:openbsd:3.4 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:linux:7.2 cpe:/o:redhat:linux:7.3 cpe:/o:redhat:linux:8.0 cpe:/o:sco:openserver:5.0.6 cpe:/o:sco:openserver:5.0.7

CVE-2004-0079

2004-11-23T00:00:00.000-05:00

2018-10-30T12:26:18.123-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FREEBSD FreeBSD-SA-04:05 NETBSD NetBSD-SA2004-005 SCO SCOSA-2004.10 CONECTIVA CLA-2004:834 CONFIRM http://docs.info.apple.com/article.html?artnum=61798 FEDORA FEDORA-2004-095 APPLE APPLE-SA-2005-08-17 APPLE APPLE-SA-2005-08-15 CONFIRM http://lists.apple.com/mhonarc/security-announce/msg00045.html BUGTRAQ 20040317 New OpenSSL releases fix denial of service attacks [17 March 2004] HP SSRT4717 GENTOO GLSA-200403-03 SUNALERT 57524 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2005-239.htm CONFIRM http://support.lexmark.com/index?page=content&id=TE88&locale=EN&userlocale=EN_US CIAC O-101 CISCO 20040317 Cisco OpenSSL Implementation Vulnerability DEBIAN DSA-465 CERT-VN VU#288574 ENGARDE ESA-20040317-003 MANDRAKE MDKSA-2004:023 SUSE SuSE-SA:2004:007 CONFIRM http://www.openssl.org/news/secadv_20040317.txt FEDORA FEDORA-2005-1042 REDHAT RHSA-2004:120 REDHAT RHSA-2004:121 REDHAT RHSA-2004:139 REDHAT RHSA-2005:829 REDHAT RHSA-2005:830 BID 9899 SLACKWARE SSA:2004-077 TRUSTIX 2004-0012 MISC http://www.uniras.gov.uk/vuls/2004/224012/index.htm CERT TA04-078A XF openssl-dochangecipherspec-dos(15505) The do_change_cipher_spec function in OpenSSL 0.9.6c to 0.9.6k, and 0.9.7a to 0.9.7c, allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that triggers a null dereference.

cpe:/a:andries_brouwer:util-linux:2.11

CVE-2004-0080

2004-03-03T00:00:00.000-05:00

2017-10-09T21:30:17.127-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SGI 20040201-01-U SGI 20040406-01-U BUGTRAQ 20040331 OpenLinux: util-linux could leak sensitive data BUGTRAQ 20040408 LNSA-#2004-0010: login may leak sensitive data GENTOO GLSA-200404-06 CERT-VN VU#801526 REDHAT RHSA-2004:056 BID 9558 XF utillinux-information-leak(15016) The login program in util-linux 2.11 and earlier uses a pointer after it has been freed and reallocated, which could cause login to leak sensitive data.

cpe:/a:4d:webstar:4.0 cpe:/a:4d:webstar:5.2 cpe:/a:4d:webstar:5.2.1 cpe:/a:4d:webstar:5.2.2 cpe:/a:4d:webstar:5.2.3 cpe:/a:4d:webstar:5.2.4 cpe:/a:4d:webstar:5.3 cpe:/a:4d:webstar:5.3.1 cpe:/a:avaya:intuity_audix:::lx cpe:/a:avaya:intuity_audix:5.1.46 cpe:/a:avaya:intuity_audix:s3210 cpe:/a:avaya:intuity_audix:s3400 cpe:/a:avaya:vsu:5 cpe:/a:avaya:vsu:5x cpe:/a:avaya:vsu:100_r2.0.1 cpe:/a:avaya:vsu:500 cpe:/a:avaya:vsu:2000_r2.0.1 cpe:/a:avaya:vsu:5000_r2.0.1 cpe:/a:avaya:vsu:7500_r2.0.1 cpe:/a:avaya:vsu:10000_r2.0.1 cpe:/a:checkpoint:firewall-1:::vsx-ng-ai cpe:/a:checkpoint:firewall-1:2.0::gx cpe:/a:checkpoint:firewall-1:next_generation_fp0 cpe:/a:checkpoint:firewall-1:next_generation_fp1 cpe:/a:checkpoint:firewall-1:next_generation_fp2 cpe:/a:checkpoint:provider-1:4.1 cpe:/a:checkpoint:provider-1:4.1:sp1 cpe:/a:checkpoint:provider-1:4.1:sp2 cpe:/a:checkpoint:provider-1:4.1:sp3 cpe:/a:checkpoint:provider-1:4.1:sp4 cpe:/a:checkpoint:vpn-1:next_generation cpe:/a:checkpoint:vpn-1:next_generation_fp0 cpe:/a:checkpoint:vpn-1:next_generation_fp1 cpe:/a:checkpoint:vpn-1:vsx_ng_with_application_intelligence cpe:/a:cisco:access_registrar cpe:/a:cisco:application_and_content_networking_software cpe:/a:cisco:ciscoworks_common_management_foundation:2.1 cpe:/a:cisco:ciscoworks_common_services:2.2 cpe:/a:cisco:css11000_content_services_switch cpe:/a:cisco:css_secure_content_accelerator:1.0 cpe:/a:cisco:css_secure_content_accelerator:2.0 cpe:/a:cisco:okena_stormwatch:3.2 cpe:/a:cisco:pix_firewall:6.2.2_.111 cpe:/a:cisco:threat_response cpe:/a:cisco:webns:6.10 cpe:/a:cisco:webns:6.10_b4 cpe:/a:cisco:webns:7.1_0.1.02 cpe:/a:cisco:webns:7.1_0.2.06 cpe:/a:cisco:webns:7.2_0.0.03 cpe:/a:cisco:webns:7.10 cpe:/a:cisco:webns:7.10_.0.06s cpe:/a:hp:wbem:a.01.05.08 cpe:/a:hp:wbem:a.02.00.00 cpe:/a:hp:wbem:a.02.00.01 cpe:/a:lite:speed_technologies_litespeed_web_server:1.0.1 cpe:/a:lite:speed_technologies_litespeed_web_server:1.0.2 cpe:/a:lite:speed_technologies_litespeed_web_server:1.0.3 cpe:/a:lite:speed_technologies_litespeed_web_server:1.1 cpe:/a:lite:speed_technologies_litespeed_web_server:1.1.1 cpe:/a:lite:speed_technologies_litespeed_web_server:1.2.1 cpe:/a:lite:speed_technologies_litespeed_web_server:1.2.2 cpe:/a:lite:speed_technologies_litespeed_web_server:1.2_rc1 cpe:/a:lite:speed_technologies_litespeed_web_server:1.2_rc2 cpe:/a:lite:speed_technologies_litespeed_web_server:1.3 cpe:/a:lite:speed_technologies_litespeed_web_server:1.3.1 cpe:/a:lite:speed_technologies_litespeed_web_server:1.3_rc1 cpe:/a:lite:speed_technologies_litespeed_web_server:1.3_rc2 cpe:/a:lite:speed_technologies_litespeed_web_server:1.3_rc3 cpe:/a:neoteris:instant_virtual_extranet:3.0 cpe:/a:neoteris:instant_virtual_extranet:3.1 cpe:/a:neoteris:instant_virtual_extranet:3.2 cpe:/a:neoteris:instant_virtual_extranet:3.3 cpe:/a:neoteris:instant_virtual_extranet:3.3.1 cpe:/a:novell:edirectory:8.0 cpe:/a:novell:edirectory:8.5 cpe:/a:novell:edirectory:8.5.12a cpe:/a:novell:edirectory:8.5.27 cpe:/a:novell:edirectory:8.6.2 cpe:/a:novell:edirectory:8.7 cpe:/a:novell:edirectory:8.7.1 cpe:/a:novell:edirectory:8.7.1:sp1 cpe:/a:novell:imanager:1.5 cpe:/a:novell:imanager:2.0 cpe:/a:openssl:openssl:0.9.6c cpe:/a:openssl:openssl:0.9.6d cpe:/a:openssl:openssl:0.9.6e cpe:/a:openssl:openssl:0.9.6f cpe:/a:openssl:openssl:0.9.6g cpe:/a:openssl:openssl:0.9.6h cpe:/a:openssl:openssl:0.9.6i cpe:/a:openssl:openssl:0.9.6j cpe:/a:openssl:openssl:0.9.6k cpe:/a:openssl:openssl:0.9.7 cpe:/a:openssl:openssl:0.9.7:beta1 cpe:/a:openssl:openssl:0.9.7:beta2 cpe:/a:openssl:openssl:0.9.7:beta3 cpe:/a:openssl:openssl:0.9.7a cpe:/a:openssl:openssl:0.9.7b cpe:/a:openssl:openssl:0.9.7c cpe:/a:redhat:openssl:0.9.6-15::i386 cpe:/a:redhat:openssl:0.9.6b-3::i386 cpe:/a:redhat:openssl:0.9.7a-2::i386 cpe:/a:redhat:openssl:0.9.7a-2::i386_dev cpe:/a:redhat:openssl:0.9.7a-2::i386_perl cpe:/a:rsa:bsafe_ssl-j_sdk:3.0 cpe:/a:rsa:bsafe_ssl-j_sdk:3.0.1 cpe:/a:rsa:bsafe_ssl-j_sdk:3.1 cpe:/a:sgi:propack:2.3 cpe:/a:sgi:propack:2.4 cpe:/a:sgi:propack:3.0 cpe:/a:stonesoft:servercluster:2.5 cpe:/a:stonesoft:servercluster:2.5.2 cpe:/a:stonesoft:stonebeat_fullcluster:1_2.0 cpe:/a:stonesoft:stonebeat_fullcluster:1_3.0 cpe:/a:stonesoft:stonebeat_fullcluster:2.0 cpe:/a:stonesoft:stonebeat_fullcluster:2.5 cpe:/a:stonesoft:stonebeat_fullcluster:3.0 cpe:/a:stonesoft:stonebeat_securitycluster:2.0 cpe:/a:stonesoft:stonebeat_securitycluster:2.5 cpe:/a:stonesoft:stonebeat_webcluster:2.0 cpe:/a:stonesoft:stonebeat_webcluster:2.5 cpe:/a:stonesoft:stonegate:1.5.17 cpe:/a:stonesoft:stonegate:1.5.18 cpe:/a:stonesoft:stonegate:1.6.2 cpe:/a:stonesoft:stonegate:1.6.3 cpe:/a:stonesoft:stonegate:1.7 cpe:/a:stonesoft:stonegate:1.7.1 cpe:/a:stonesoft:stonegate:1.7.2 cpe:/a:stonesoft:stonegate:2.0.1 cpe:/a:stonesoft:stonegate:2.0.4 cpe:/a:stonesoft:stonegate:2.0.5 cpe:/a:stonesoft:stonegate:2.0.6 cpe:/a:stonesoft:stonegate:2.0.7 cpe:/a:stonesoft:stonegate:2.0.8 cpe:/a:stonesoft:stonegate:2.0.9 cpe:/a:stonesoft:stonegate:2.1 cpe:/a:stonesoft:stonegate:2.2 cpe:/a:stonesoft:stonegate:2.2.1 cpe:/a:stonesoft:stonegate:2.2.4 cpe:/a:stonesoft:stonegate_vpn_client:1.7 cpe:/a:stonesoft:stonegate_vpn_client:1.7.2 cpe:/a:stonesoft:stonegate_vpn_client:2.0 cpe:/a:stonesoft:stonegate_vpn_client:2.0.7 cpe:/a:stonesoft:stonegate_vpn_client:2.0.8 cpe:/a:stonesoft:stonegate_vpn_client:2.0.9 cpe:/a:tarantella:tarantella_enterprise:3.20 cpe:/a:tarantella:tarantella_enterprise:3.30 cpe:/a:tarantella:tarantella_enterprise:3.40 cpe:/a:vmware:gsx_server:2.0 cpe:/a:vmware:gsx_server:2.0.1_build_2129 cpe:/a:vmware:gsx_server:2.5.1 cpe:/a:vmware:gsx_server:2.5.1_build_5336 cpe:/a:vmware:gsx_server:3.0_build_7592 cpe:/h:avaya:converged_communications_server:2.0 cpe:/h:avaya:s8300:r2.0.0 cpe:/h:avaya:s8300:r2.0.1 cpe:/h:avaya:s8500:r2.0.0 cpe:/h:avaya:s8500:r2.0.1 cpe:/h:avaya:s8700:r2.0.0 cpe:/h:avaya:s8700:r2.0.1 cpe:/h:avaya:sg200:4.4 cpe:/h:avaya:sg200:4.31.29 cpe:/h:avaya:sg203:4.4 cpe:/h:avaya:sg203:4.31.29 cpe:/h:avaya:sg208 cpe:/h:avaya:sg208:4.4 cpe:/h:avaya:sg5:4.2 cpe:/h:avaya:sg5:4.3 cpe:/h:avaya:sg5:4.4 cpe:/h:bluecoat:proxysg cpe:/h:cisco:call_manager cpe:/h:cisco:content_services_switch_11500 cpe:/h:cisco:firewall_services_module cpe:/h:cisco:firewall_services_module:1.1.2 cpe:/h:cisco:firewall_services_module:1.1.3 cpe:/h:cisco:firewall_services_module:1.1_%283.005%29 cpe:/h:cisco:firewall_services_module:2.1_%280.208%29 cpe:/h:cisco:gss_4480_global_site_selector cpe:/h:cisco:gss_4490_global_site_selector cpe:/h:cisco:mds_9000 cpe:/h:cisco:secure_content_accelerator:10000 cpe:/h:hp:aaa_server cpe:/h:hp:apache-based_web_server:2.0.43.00 cpe:/h:hp:apache-based_web_server:2.0.43.04 cpe:/h:securecomputing:sidewinder:5.2 cpe:/h:securecomputing:sidewinder:5.2.0.01 cpe:/h:securecomputing:sidewinder:5.2.0.02 cpe:/h:securecomputing:sidewinder:5.2.0.03 cpe:/h:securecomputing:sidewinder:5.2.0.04 cpe:/h:securecomputing:sidewinder:5.2.1 cpe:/h:securecomputing:sidewinder:5.2.1.02 cpe:/h:sun:crypto_accelerator_4000:1.0 cpe:/h:symantec:clientless_vpn_gateway_4400:5.0 cpe:/o:apple:mac_os_x:10.3.3 cpe:/o:apple:mac_os_x_server:10.3.3 cpe:/o:bluecoat:cacheos_ca_sa:4.1.10 cpe:/o:bluecoat:cacheos_ca_sa:4.1.12 cpe:/o:cisco:ios:12.1%2811%29e cpe:/o:cisco:ios:12.1%2811b%29e cpe:/o:cisco:ios:12.1%2811b%29e12 cpe:/o:cisco:ios:12.1%2811b%29e14 cpe:/o:cisco:ios:12.1%2813%29e9 cpe:/o:cisco:ios:12.1%2819%29e1 cpe:/o:cisco:ios:12.2%2814%29sy cpe:/o:cisco:ios:12.2%2814%29sy1 cpe:/o:cisco:ios:12.2sy cpe:/o:cisco:ios:12.2za cpe:/o:cisco:pix_firewall_software:6.0 cpe:/o:cisco:pix_firewall_software:6.0%281%29 cpe:/o:cisco:pix_firewall_software:6.0%282%29 cpe:/o:cisco:pix_firewall_software:6.0%283%29 cpe:/o:cisco:pix_firewall_software:6.0%284%29 cpe:/o:cisco:pix_firewall_software:6.0%284.101%29 cpe:/o:cisco:pix_firewall_software:6.1 cpe:/o:cisco:pix_firewall_software:6.1%281%29 cpe:/o:cisco:pix_firewall_software:6.1%282%29 cpe:/o:cisco:pix_firewall_software:6.1%283%29 cpe:/o:cisco:pix_firewall_software:6.1%284%29 cpe:/o:cisco:pix_firewall_software:6.1%285%29 cpe:/o:cisco:pix_firewall_software:6.2 cpe:/o:cisco:pix_firewall_software:6.2%281%29 cpe:/o:cisco:pix_firewall_software:6.2%282%29 cpe:/o:cisco:pix_firewall_software:6.2%283%29 cpe:/o:cisco:pix_firewall_software:6.2%283.100%29 cpe:/o:cisco:pix_firewall_software:6.3 cpe:/o:cisco:pix_firewall_software:6.3%281%29 cpe:/o:cisco:pix_firewall_software:6.3%282%29 cpe:/o:cisco:pix_firewall_software:6.3%283.102%29 cpe:/o:cisco:pix_firewall_software:6.3%283.109%29 cpe:/o:freebsd:freebsd:4.8 cpe:/o:freebsd:freebsd:4.8:releng cpe:/o:freebsd:freebsd:4.9 cpe:/o:freebsd:freebsd:5.1 cpe:/o:freebsd:freebsd:5.1:release cpe:/o:freebsd:freebsd:5.1:releng cpe:/o:freebsd:freebsd:5.2 cpe:/o:freebsd:freebsd:5.2.1:release cpe:/o:hp:hp-ux:8.05 cpe:/o:hp:hp-ux:11.00 cpe:/o:hp:hp-ux:11.11 cpe:/o:hp:hp-ux:11.23 cpe:/o:openbsd:openbsd:3.3 cpe:/o:openbsd:openbsd:3.4 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:linux:7.2 cpe:/o:redhat:linux:7.3 cpe:/o:redhat:linux:8.0 cpe:/o:sco:openserver:5.0.6 cpe:/o:sco:openserver:5.0.7

CVE-2004-0081

2004-11-23T00:00:00.000-05:00

2018-10-30T12:26:18.123-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SCO SCOSA-2004.10 SGI 20040304-01-U CONECTIVA CLA-2004:834 FEDORA FEDORA-2004-095 BUGTRAQ 20040317 Re: New OpenSSL releases fix denial of service attacks [17 March 2004] BUGTRAQ 20040508 [FLSA-2004:1395] Updated OpenSSL resolves security vulnerability REDHAT RHSA-2004:119 GENTOO GLSA-200403-03 SUNALERT 57524 CISCO 20040317 Cisco OpenSSL Implementation Vulnerability DEBIAN DSA-465 CERT-VN VU#465542 ENGARDE ESA-20040317-003 REDHAT RHSA-2004:120 REDHAT RHSA-2004:121 REDHAT RHSA-2004:139 BID 9899 TRUSTIX 2004-0012 MISC http://www.uniras.gov.uk/vuls/2004/224012/index.htm CERT TA04-078A XF openssl-tls-dos(15509) OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.

cpe:/a:samba:samba:3.0.0 cpe:/a:samba:samba:3.0.1

CVE-2004-0082

2004-03-03T00:00:00.000-05:00

2018-10-30T12:25:11.107-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://us1.samba.org/samba/ftp/WHATSNEW-3.0.2a.txt CIAC O-078 REDHAT RHSA-2004:064 BID 9637 CONFIRM http://www.vuxml.org/freebsd/3388eff9-5d6e-11d8-80e3-0020ed76ef5a.html XF samba-mksmbpasswd-gain-access(15132) The mksmbpasswd shell script (mksmbpasswd.sh) in Samba 3.0.0 and 3.0.1, when creating an account but marking it as disabled, may overwrite the user password with an uninitialized buffer, which could enable the account with a more easily guessable password.

cpe:/a:xfree86_project:x11r6:4.1.0 cpe:/a:xfree86_project:x11r6:4.1.11 cpe:/a:xfree86_project:x11r6:4.1.12 cpe:/a:xfree86_project:x11r6:4.2.0 cpe:/a:xfree86_project:x11r6:4.2.1 cpe:/a:xfree86_project:x11r6:4.2.1::errata cpe:/a:xfree86_project:x11r6:4.3.0 cpe:/o:openbsd:openbsd:3.3 cpe:/o:openbsd:openbsd:3.4

CVE-2004-0083

2004-03-03T00:00:00.000-05:00

2017-10-10T21:29:20.637-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONECTIVA CLA-2004:821 BUGTRAQ 20040210 iDEFENSESecurityAdvisory02.10.04: XFree86FontInformationFileBufferOverflow BUGTRAQ 20040211 XFree86 vulnerability exploit FEDORA FLSA:2314 GENTOO GLSA-200402-02 SUNALERT 57768 DEBIAN DSA-443 MISC http://www.idefense.com/application/poi/display?id=72 CERT-VN VU#820006 MANDRAKE MDKSA-2004:012 SUSE SuSE-SA:2004:006 REDHAT RHSA-2004:059 REDHAT RHSA-2004:060 REDHAT RHSA-2004:061 BID 9636 SLACKWARE SSA:2004-043 CONFIRM http://www.xfree86.org/cvs/changes XF xfree86-fontalias-bo(15130) Buffer overflow in ReadFontAlias from dirfile.c of XFree86 4.1.0 through 4.3.0 allows local users and remote attackers to execute arbitrary code via a font alias file (font.alias) with a long token, a different vulnerability than CVE-2004-0084 and CVE-2004-0106.

CVE-2004-0084

2004-03-03T00:00:00.000-05:00

2017-10-10T21:29:20.717-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONECTIVA CLA-2004:821 BUGTRAQ 20040212 iDEFENSE Security Advisory 02.11.04: XFree86 Font Information File Buffer Overflow II FEDORA FLSA:2314 SUNALERT 57768 DEBIAN DSA-443 MISC http://www.idefense.com/application/poi/display?id=73 CERT-VN VU#667502 MANDRAKE MDKSA-2004:012 SUSE SuSE-SA:2004:006 REDHAT RHSA-2004:059 REDHAT RHSA-2004:060 REDHAT RHSA-2004:061 BID 9652 SLACKWARE SSA:2004-043 XF xfree86-copyisolatin1lLowered-bo(15200) Buffer overflow in the ReadFontAlias function in XFree86 4.1.0 to 4.3.0, when using the CopyISOLatin1Lowered function, allows local or remote authenticated users to execute arbitrary code via a malformed entry in the font alias (font.alias) file, a different vulnerability than CVE-2004-0083 and CVE-2004-0106.

cpe:/o:apple:mac_os_x:10.1.5 cpe:/o:apple:mac_os_x:10.2.8

CVE-2004-0085

2004-03-03T00:00:00.000-05:00

2017-07-10T21:29:53.917-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2004-01-26 BID 9504 XF macosx-mail-undisclosed(14992) Unknown vulnerability in the Mail application for Mac OS X 10.1.5 and 10.2.8 with unknown impact, a different vulnerability than CVE-2004-0086.

cpe:/o:apple:mac_os_x:10.3.2

CVE-2004-0086

2004-03-03T00:00:00.000-05:00

2008-09-10T15:25:05.837-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

APPLE APPLE-SA-2004-01-26 BID 9504 Unknown vulnerability in the Mail application for Mac OS X 10.3.2 has unknown impact and attack vectors, a different vulnerability than CVE-2004-0085.

cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3.2

CVE-2004-0087

2004-03-03T00:00:00.000-05:00

2017-07-10T21:29:53.993-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2004-01-26 BID 9504 XF macosx-configd-file-manipulation(14997) The System Configuration subsystem in Mac OS 10.2.8 and 10.3.2 allows local users to modify network settings, a different vulnerability than CVE-2004-0088.

cpe:/o:apple:mac_os_x:10.2.8

CVE-2004-0088

2004-03-03T00:00:00.000-05:00

2008-09-10T15:25:05.977-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

APPLE APPLE-SA-2004-01-26 BID 9504 The System Configuration subsystem in Mac OS 10.2.8 allows local users to modify network settings, a different vulnerability than CVE-2004-0087.

cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3.9

CVE-2004-0089

2004-03-03T00:00:00.000-05:00

2017-10-09T21:30:17.267-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

APPLE APPLE-SA-2004-01-26 ATSTAKE A012704-1 CERT-VN VU#902374 BID 9509 XF macosx-trublue-environmentvariable-bo(14968) Buffer overflow in TruBlueEnvironment in Mac OS X 10.3.x and 10.2.x allows local users to gain privileges via a long environment variable.

cpe:/o:apple:mac_os_x:10.1.5 cpe:/o:apple:mac_os_x:10.2 cpe:/o:apple:mac_os_x:10.2.1 cpe:/o:apple:mac_os_x:10.2.2 cpe:/o:apple:mac_os_x:10.2.3 cpe:/o:apple:mac_os_x:10.2.4 cpe:/o:apple:mac_os_x:10.2.5 cpe:/o:apple:mac_os_x:10.2.6 cpe:/o:apple:mac_os_x:10.2.7 cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3 cpe:/o:apple:mac_os_x:10.3.1 cpe:/o:apple:mac_os_x:10.3.2 cpe:/o:apple:mac_os_x_server:10.1.5 cpe:/o:apple:mac_os_x_server:10.2 cpe:/o:apple:mac_os_x_server:10.2.1 cpe:/o:apple:mac_os_x_server:10.2.2 cpe:/o:apple:mac_os_x_server:10.2.3 cpe:/o:apple:mac_os_x_server:10.2.4 cpe:/o:apple:mac_os_x_server:10.2.5 cpe:/o:apple:mac_os_x_server:10.2.6 cpe:/o:apple:mac_os_x_server:10.2.7 cpe:/o:apple:mac_os_x_server:10.2.8 cpe:/o:apple:mac_os_x_server:10.3 cpe:/o:apple:mac_os_x_server:10.3.1 cpe:/o:apple:mac_os_x_server:10.3.2

CVE-2004-0090

2004-12-31T00:00:00.000-05:00

2008-09-05T16:37:30.397-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-06-15T10:15:00.000-04:00

APPLE APPLE-SA-2004-01-26 AUSCERT ESB-2004.0072 BID 9504 Unknown vulnerability in Windows File Sharing for Mac OS X 10.1.5 through 10.3.2 does not "shutdown properly," which has unknown impact and attack vectors.

cpe:/a:jelsoft:vbulletin:3.0_beta_2

CVE-2004-0091

2004-02-17T00:00:00.000-05:00

2016-10-17T22:40:50.743-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040120 vBulletin Security Vulnerability VULN-DEV 20040120 vBulletin Security Vulnerability VULN-DEV 20040120 Re: vBulletin Security Vulnerability VULN-DEV 20040123 RE: vBulletin Security Vulnerability SECTRACK 1008780 ** DISPUTED ** NOTE: this issue has been disputed by the vendor. Cross-site scripting (XSS) vulnerability in register.php for unknown versions of vBulletin allows remote attackers to inject arbitrary HTML or web script via the reg_site (or possibly regsite) parameter. NOTE: the vendor has disputed this issue, saying "There is no hidden field called 'reg_site', nor any $reg_site variable anywhere in the vBulletin 2 or vBulletin 3 source code or templates, nor has it ever existed. We can only assume that this vulnerability was found in a site running code modified from that supplied by Jelsoft."

cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3.2

CVE-2004-0092

2004-03-03T00:00:00.000-05:00

2008-09-10T15:25:06.587-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

APPLE APPLE-SA-2004-01-26 BID 9504 Unknown vulnerability in Safari web browser in Mac OS X 10.2.8 and 10.3.2, with unknown impact.

CVE-2004-0093

2004-03-15T00:00:00.000-05:00

2017-10-09T21:30:17.330-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SGI 20040406-01-U CONECTIVA CLSA-2004:824 DEBIAN DSA-443 REDHAT RHSA-2004:152 BID 9701 XF xfree86-glx-array-dos(15272) XFree86 4.1.0 allows remote attackers to cause a denial of service and possibly execute arbitrary code via an out-of-bounds array index when using the GLX extension and Direct Rendering Infrastructure (DRI).

CVE-2004-0094

2004-03-15T00:00:00.000-05:00

2017-10-09T21:30:17.390-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SGI 20040406-01-U CONECTIVA CLSA-2004:824 DEBIAN DSA-443 REDHAT RHSA-2004:152 BID 9701 XF xfree86-glx-integer-dos(15273) Integer signedness errors in XFree86 4.1.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code when using the GLX extension and Direct Rendering Infrastructure (DRI).

cpe:/a:mcafee:epolicy_orchestrator:3.6.0

CVE-2004-0095

2004-02-17T00:00:00.000-05:00

2017-10-09T21:30:17.453-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://download.nai.com/products/patches/ePO/v3.1.0/EPO3013.zip BID 9476 XF epolicy-contentlength-post-dos(14989) McAfee ePolicy Orchestrator agent allows remote attackers to cause a denial of service (memory consumption and crash) and possibly execute arbitrary code via an HTTP POST request with an invalid Content-Length value, possibly triggering a buffer overflow.

cpe:/a:apache:mod_python:2.7.9

CVE-2004-0096

2004-03-03T00:00:00.000-05:00

2008-09-05T16:37:31.383-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

GENTOO GLSA-200401-03 MLIST [mod_python] 20040122 [ANNOUNCE] Mod_python 2.7.10 REDHAT RHSA-2004:058 REDHAT RHSA-2004:063 Unknown vulnerability in mod_python 2.7.9 allows remote attackers to cause a denial of service (httpd crash) via a certain query string, a variant of CAN-2003-0973.

cpe:/a:openh323_project:pwlib:1.6.0

CVE-2004-0097

2004-03-03T00:00:00.000-05:00

2017-10-10T21:29:20.793-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CERT CA-2004-01 DEBIAN DSA-448 CERT-VN VU#749342 REDHAT RHSA-2004:047 BID 9406 XF pwlib-message-dos(15202) Multiple vulnerabilities in PWLib before 1.6.0 allow remote attackers to cause a denial of service and possibly execute arbitrary code, as demonstrated by the NISCC/OUSPG PROTOS test suite for the H.225 protocol.

CVE-2004-0098

2017-05-11T10:29:01.463-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

cpe:/o:freebsd:freebsd:5.1:release cpe:/o:freebsd:freebsd:5.2.1:release

CVE-2004-0099

2004-03-03T00:00:00.000-05:00

2017-10-09T21:30:17.517-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FREEBSD FreeBSD-SA-04:01 BID 9533 XF freebsd-mksnapffs-bypass-security(15005) mksnap_ffs in FreeBSD 5.1 and 5.2 only sets the snapshot flag when creating a snapshot for a file system, which causes default values for other flags to be used, possibly disabling security-critical settings and allowing a local user to bypass intended access restrictions.

cpe:/a:linley_henzell:crawl:4.0.0_b23

CVE-2004-0103

2004-03-03T00:00:00.000-05:00

2017-07-10T21:29:54.087-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

DEBIAN DSA-432 BID 9566 XF crawl-long-environment-bo(15032) crawl before 4.0.0 beta23 does not properly "apply a size check" when copying a certain environment variable, which may allow local users to gain privileges, possibly as a result of a buffer overflow.

cpe:/a:metamail_corporation:metamail:2.7 cpe:/a:sgi:propack:2.3 cpe:/a:sgi:propack:2.4 cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:linux_advanced_workstation:2.1::itanium_processor

CVE-2004-0104

2004-03-03T00:00:00.000-05:00

2017-07-10T21:29:54.150-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

VULNWATCH 20040218 metamail format string bugs and buffer overflows BUGTRAQ 20040218 metamail format string bugs and buffer overflows CIAC O-083 DEBIAN DSA-449 CERT-VN VU#518518 MANDRAKE MDKSA-2004:014 REDHAT RHSA-2004:073 BID 9692 SLACKWARE SSA:2004-049 XF metamail-contenttype-format-string(15245) XF metamail-printheader-format-string(15259) Multiple format string vulnerabilities in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.

CVE-2004-0105

2004-03-03T00:00:00.000-05:00

2017-07-10T21:29:54.213-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

VULNWATCH 20040218 metamail format string bugs and buffer overflows BUGTRAQ 20040218 metamail format string bugs and buffer overflows CIAC O-083 DEBIAN DSA-449 CERT-VN VU#513062 MANDRAKE MDKSA-2004:014 REDHAT RHSA-2004:073 BID 9692 SLACKWARE SSA:2004-049 XF metamail-printheader-nonascii-bo(15247) XF metamail-splitmail-subject-bo(15258) Multiple buffer overflows in Metamail 2.7 and earlier allow remote attackers to execute arbitrary code.

CVE-2004-0106

2004-03-03T00:00:00.000-05:00

2017-10-10T21:29:20.887-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONECTIVA CLA-2004:821 FEDORA FLSA:2314 DEBIAN DSA-443 MANDRAKE MDKSA-2004:012 SUSE SuSE-SA:2004:006 REDHAT RHSA-2004:059 REDHAT RHSA-2004:060 REDHAT RHSA-2004:061 SLACKWARE SSA:2004-043 XF xfree86-multiple-font-improper-handling(15206) Multiple unknown vulnerabilities in XFree86 4.1.0 to 4.3.0, related to improper handling of font files, a different set of vulnerabilities than CVE-2004-0083 and CVE-2004-0084.

cpe:/a:redhat:sysstat:4.0.7-3::i386 cpe:/a:sgi:propack:2.3 cpe:/a:sgi:propack:2.4 cpe:/a:sysstat:sysstat:4.0.7 cpe:/a:sysstat:sysstat:4.1.1 cpe:/a:sysstat:sysstat:4.1.2 cpe:/a:sysstat:sysstat:4.1.3 cpe:/a:sysstat:sysstat:4.1.4 cpe:/a:sysstat:sysstat:4.1.5 cpe:/a:sysstat:sysstat:4.1.6 cpe:/a:sysstat:sysstat:4.1.7 cpe:/a:sysstat:sysstat:5.0.1

CVE-2004-0107

2004-04-15T00:00:00.000-04:00

2017-10-10T21:29:20.967-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SGI 20040302-01-U CIAC O-097 REDHAT RHSA-2004:053 REDHAT RHSA-2004:093 BID 9838 XF sysstat-post-trigger-symlink(15428) The (1) post and (2) trigger scripts in sysstat 4.0.7 and earlier allow local users to overwrite arbitrary files via symlink attacks on temporary files, a different vulnerability than CVE-2004-0108.

CVE-2004-0108

2004-04-15T00:00:00.000-04:00

2017-10-09T21:30:17.580-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SGI 20040302-01-U DEBIAN DSA-460 REDHAT RHSA-2004:053 BID 9844 XF sysstat-isag-symlink(15437) The isag utility, which processes sysstat data, allows local users to overwrite arbitrary files via a symlink attack on temporary files, a different vulnerability than CAN-2004-0107.

cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.5.0 cpe:/o:linux:linux_kernel:2.6.0

CVE-2004-0109

2004-06-01T00:00:00.000-04:00

2017-10-10T21:29:21.060-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SGI 20040405-01-U SGI 20040504-01-U CONECTIVA CLA-2004:846 TRUSTIX 2004-0020 REDHAT RHSA-2004:166 SECUNIA 11429 GENTOO GLSA-200407-02 CIAC O-121 CIAC O-127 DEBIAN DSA-479 DEBIAN DSA-480 DEBIAN DSA-481 DEBIAN DSA-482 DEBIAN DSA-489 DEBIAN DSA-491 DEBIAN DSA-495 MISC http://www.idefense.com/application/poi/display?id=101&type=vulnerabilities ENGARDE ESA-20040428-004 MANDRAKE MDKSA-2004:029 SUSE SuSE-SA:2004:009 REDHAT RHSA-2004:105 REDHAT RHSA-2004:106 REDHAT RHSA-2004:183 BID 10141 TURBO TLSA-2004-14 XF linux-iso9660-bo(15866) Buffer overflow in the ISO9660 file system component for Linux kernel 2.4.x, 2.5.x and 2.6.x, allows local users with physical access to overflow kernel memory and execute arbitrary code via a malformed CD containing a long symbolic link entry.

cpe:/a:sgi:propack:2.3 cpe:/a:sgi:propack:2.4 cpe:/a:xmlsoft:libxml:1.8.17 cpe:/a:xmlsoft:libxml2:2.4.19 cpe:/a:xmlsoft:libxml2:2.4.23 cpe:/a:xmlsoft:libxml2:2.5.4 cpe:/a:xmlsoft:libxml2:2.5.10 cpe:/a:xmlsoft:libxml2:2.5.11 cpe:/a:xmlsoft:libxml2:2.6.0 cpe:/a:xmlsoft:libxml2:2.6.1 cpe:/a:xmlsoft:libxml2:2.6.2 cpe:/a:xmlsoft:libxml2:2.6.3 cpe:/a:xmlsoft:libxml2:2.6.4 cpe:/a:xmlsoft:libxml2:2.6.5

CVE-2004-0110

2004-03-15T00:00:00.000-05:00

2017-10-10T21:29:21.137-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040305 [OpenPKG-SA-2004.003] OpenPKG Security Advisory (libxml) BUGTRAQ 20040306 TSLSA-2004-0010 - libxml2 REDHAT RHSA-2004:090 GENTOO GLSA-200403-01 CIAC O-086 DEBIAN DSA-455 CERT-VN VU#493966 SUSE SUSE-SR:2005:001 REDHAT RHSA-2004:091 REDHAT RHSA-2004:650 BID 9718 CONFIRM http://www.xmlsoft.org/news.html XF libxml2-nanohttp-bo(15301) XF libxml2-nanoftp-bo(15302) Buffer overflow in the (1) nanohttp or (2) nanoftp modules in XMLSoft Libxml 2 (Libxml2) 2.6.0 through 2.6.5 allow remote attackers to execute arbitrary code via a long URL.

cpe:/a:gnome:gdkpixbuf:0.18 cpe:/a:gnome:gdkpixbuf:0.20 cpe:/a:redhat:gdk_pixbuf:0.18.0-7::i386 cpe:/a:redhat:gdk_pixbuf:0.18.0-7::i386_dev cpe:/a:redhat:gdk_pixbuf:0.18.0-7::i386_gnome cpe:/a:sgi:propack:2.3 cpe:/a:sgi:propack:2.4 cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:3.0::advanced_servers cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation cpe:/o:redhat:linux_advanced_workstation:2.1::itanium_processor

CVE-2004-0111

2004-04-15T00:00:00.000-04:00

2017-10-09T21:30:17.657-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov DEBIAN DSA-464 MANDRAKE MDKSA-2004:020 REDHAT RHSA-2004:102 REDHAT RHSA-2004:103 BID 9842 FEDORA FLSA:2005 XF gdk-pixbuf-bitmap-dos(15426) gdk-pixbuf before 0.20 allows attackers to cause a denial of service (crash) via a malformed bitmap (BMP) file.

cpe:/a:4d:webstar:4.0 cpe:/a:4d:webstar:5.2 cpe:/a:4d:webstar:5.2.1 cpe:/a:4d:webstar:5.2.2 cpe:/a:4d:webstar:5.2.3 cpe:/a:4d:webstar:5.2.4 cpe:/a:4d:webstar:5.3 cpe:/a:4d:webstar:5.3.1 cpe:/a:avaya:intuity_audix:::lx cpe:/a:avaya:intuity_audix:5.1.46 cpe:/a:avaya:intuity_audix:s3210 cpe:/a:avaya:intuity_audix:s3400 cpe:/a:avaya:vsu:5 cpe:/a:avaya:vsu:5x cpe:/a:avaya:vsu:100_r2.0.1 cpe:/a:avaya:vsu:500 cpe:/a:avaya:vsu:2000_r2.0.1 cpe:/a:avaya:vsu:5000_r2.0.1 cpe:/a:avaya:vsu:7500_r2.0.1 cpe:/a:avaya:vsu:10000_r2.0.1 cpe:/a:checkpoint:firewall-1:::vsx-ng-ai cpe:/a:checkpoint:firewall-1:2.0::gx cpe:/a:checkpoint:firewall-1:next_generation_fp0 cpe:/a:checkpoint:firewall-1:next_generation_fp1 cpe:/a:checkpoint:firewall-1:next_generation_fp2 cpe:/a:checkpoint:provider-1:4.1 cpe:/a:checkpoint:provider-1:4.1:sp1 cpe:/a:checkpoint:provider-1:4.1:sp2 cpe:/a:checkpoint:provider-1:4.1:sp3 cpe:/a:checkpoint:provider-1:4.1:sp4 cpe:/a:checkpoint:vpn-1:next_generation_fp0 cpe:/a:checkpoint:vpn-1:next_generation_fp1 cpe:/a:checkpoint:vpn-1:next_generation_fp2 cpe:/a:checkpoint:vpn-1:vsx_ng_with_application_intelligence cpe:/a:cisco:access_registrar cpe:/a:cisco:application_and_content_networking_software cpe:/a:cisco:ciscoworks_common_management_foundation:2.1 cpe:/a:cisco:ciscoworks_common_services:2.2 cpe:/a:cisco:css11000_content_services_switch cpe:/a:cisco:css_secure_content_accelerator:1.0 cpe:/a:cisco:css_secure_content_accelerator:2.0 cpe:/a:cisco:okena_stormwatch:3.2 cpe:/a:cisco:pix_firewall:6.2.2_.111 cpe:/a:cisco:threat_response cpe:/a:cisco:webns:6.10 cpe:/a:cisco:webns:6.10_b4 cpe:/a:cisco:webns:7.1_0.1.02 cpe:/a:cisco:webns:7.1_0.2.06 cpe:/a:cisco:webns:7.2_0.0.03 cpe:/a:cisco:webns:7.10 cpe:/a:cisco:webns:7.10_.0.06s cpe:/a:hp:wbem:a.01.05.08 cpe:/a:hp:wbem:a.02.00.00 cpe:/a:hp:wbem:a.02.00.01 cpe:/a:lite:speed_technologies_litespeed_web_server:1.0.1 cpe:/a:lite:speed_technologies_litespeed_web_server:1.0.2 cpe:/a:lite:speed_technologies_litespeed_web_server:1.0.3 cpe:/a:lite:speed_technologies_litespeed_web_server:1.1 cpe:/a:lite:speed_technologies_litespeed_web_server:1.1.1 cpe:/a:lite:speed_technologies_litespeed_web_server:1.2.1 cpe:/a:lite:speed_technologies_litespeed_web_server:1.2.2 cpe:/a:lite:speed_technologies_litespeed_web_server:1.2_rc1 cpe:/a:lite:speed_technologies_litespeed_web_server:1.2_rc2 cpe:/a:lite:speed_technologies_litespeed_web_server:1.3 cpe:/a:lite:speed_technologies_litespeed_web_server:1.3.1 cpe:/a:lite:speed_technologies_litespeed_web_server:1.3_rc1 cpe:/a:lite:speed_technologies_litespeed_web_server:1.3_rc2 cpe:/a:lite:speed_technologies_litespeed_web_server:1.3_rc3 cpe:/a:neoteris:instant_virtual_extranet:3.0 cpe:/a:neoteris:instant_virtual_extranet:3.1 cpe:/a:neoteris:instant_virtual_extranet:3.2 cpe:/a:neoteris:instant_virtual_extranet:3.3 cpe:/a:neoteris:instant_virtual_extranet:3.3.1 cpe:/a:novell:edirectory:8.0 cpe:/a:novell:edirectory:8.5 cpe:/a:novell:edirectory:8.5.12a cpe:/a:novell:edirectory:8.5.27 cpe:/a:novell:edirectory:8.6.2 cpe:/a:novell:edirectory:8.7 cpe:/a:novell:edirectory:8.7.1 cpe:/a:novell:edirectory:8.7.1:sp1 cpe:/a:novell:imanager:1.5 cpe:/a:novell:imanager:2.0 cpe:/a:openssl:openssl:0.9.6c cpe:/a:openssl:openssl:0.9.6d cpe:/a:openssl:openssl:0.9.6e cpe:/a:openssl:openssl:0.9.6f cpe:/a:openssl:openssl:0.9.6g cpe:/a:openssl:openssl:0.9.6h cpe:/a:openssl:openssl:0.9.6i cpe:/a:openssl:openssl:0.9.6j cpe:/a:openssl:openssl:0.9.6k cpe:/a:openssl:openssl:0.9.7 cpe:/a:openssl:openssl:0.9.7:beta1 cpe:/a:openssl:openssl:0.9.7:beta2 cpe:/a:openssl:openssl:0.9.7:beta3 cpe:/a:openssl:openssl:0.9.7a cpe:/a:openssl:openssl:0.9.7b cpe:/a:openssl:openssl:0.9.7c cpe:/a:redhat:openssl:0.9.6-15::i386 cpe:/a:redhat:openssl:0.9.6b-3::i386 cpe:/a:redhat:openssl:0.9.7a-2::i386 cpe:/a:redhat:openssl:0.9.7a-2::i386_dev cpe:/a:redhat:openssl:0.9.7a-2::i386_perl cpe:/a:rsa:bsafe_ssl-j_sdk:3.0 cpe:/a:rsa:bsafe_ssl-j_sdk:3.0.1 cpe:/a:rsa:bsafe_ssl-j_sdk:3.1 cpe:/a:sgi:propack:2.3 cpe:/a:sgi:propack:2.4 cpe:/a:sgi:propack:3.0 cpe:/a:stonesoft:servercluster:2.5 cpe:/a:stonesoft:servercluster:2.5.2 cpe:/a:stonesoft:stonebeat_fullcluster:1_2.0 cpe:/a:stonesoft:stonebeat_fullcluster:1_3.0 cpe:/a:stonesoft:stonebeat_fullcluster:2.0 cpe:/a:stonesoft:stonebeat_fullcluster:2.5 cpe:/a:stonesoft:stonebeat_fullcluster:3.0 cpe:/a:stonesoft:stonebeat_securitycluster:2.0 cpe:/a:stonesoft:stonebeat_securitycluster:2.5 cpe:/a:stonesoft:stonebeat_webcluster:2.0 cpe:/a:stonesoft:stonebeat_webcluster:2.5 cpe:/a:stonesoft:stonegate:1.5.17 cpe:/a:stonesoft:stonegate:1.5.18 cpe:/a:stonesoft:stonegate:1.6.2 cpe:/a:stonesoft:stonegate:1.6.3 cpe:/a:stonesoft:stonegate:1.7 cpe:/a:stonesoft:stonegate:1.7.1 cpe:/a:stonesoft:stonegate:1.7.2 cpe:/a:stonesoft:stonegate:2.0.1 cpe:/a:stonesoft:stonegate:2.0.4 cpe:/a:stonesoft:stonegate:2.0.5 cpe:/a:stonesoft:stonegate:2.0.6 cpe:/a:stonesoft:stonegate:2.0.7 cpe:/a:stonesoft:stonegate:2.0.8 cpe:/a:stonesoft:stonegate:2.0.9 cpe:/a:stonesoft:stonegate:2.1 cpe:/a:stonesoft:stonegate:2.2 cpe:/a:stonesoft:stonegate:2.2.1 cpe:/a:stonesoft:stonegate:2.2.4 cpe:/a:tarantella:tarantella_enterprise:3.20 cpe:/a:tarantella:tarantella_enterprise:3.30 cpe:/a:tarantella:tarantella_enterprise:3.40 cpe:/a:vmware:gsx_server:2.0 cpe:/a:vmware:gsx_server:2.0.1_build_2129 cpe:/a:vmware:gsx_server:2.5.1 cpe:/a:vmware:gsx_server:2.5.1_build_5336 cpe:/a:vmware:gsx_server:3.0_build_7592 cpe:/h:avaya:converged_communications_server:2.0 cpe:/h:avaya:s8300:r2.0.0 cpe:/h:avaya:s8300:r2.0.1 cpe:/h:avaya:s8500:r2.0.0 cpe:/h:avaya:s8500:r2.0.1 cpe:/h:avaya:s8700:r2.0.0 cpe:/h:avaya:s8700:r2.0.1 cpe:/h:avaya:sg200:4.4 cpe:/h:avaya:sg200:4.31.29 cpe:/h:avaya:sg203:4.4 cpe:/h:avaya:sg203:4.31.29 cpe:/h:avaya:sg208 cpe:/h:avaya:sg208:4.4 cpe:/h:avaya:sg5:4.2 cpe:/h:avaya:sg5:4.3 cpe:/h:avaya:sg5:4.4 cpe:/h:bluecoat:proxysg cpe:/h:cisco:call_manager cpe:/h:cisco:content_services_switch_11500 cpe:/h:cisco:firewall_services_module cpe:/h:cisco:firewall_services_module:1.1.2 cpe:/h:cisco:firewall_services_module:1.1.3 cpe:/h:cisco:firewall_services_module:1.1_%283.005%29 cpe:/h:cisco:firewall_services_module:2.1_%280.208%29 cpe:/h:cisco:gss_4480_global_site_selector cpe:/h:cisco:gss_4490_global_site_selector cpe:/h:cisco:mds_9000 cpe:/h:cisco:secure_content_accelerator:10000 cpe:/h:hp:aaa_server cpe:/h:hp:apache-based_web_server:2.0.43.00 cpe:/h:hp:apache-based_web_server:2.0.43.04 cpe:/h:securecomputing:sidewinder:5.2 cpe:/h:securecomputing:sidewinder:5.2.0.01 cpe:/h:securecomputing:sidewinder:5.2.0.02 cpe:/h:securecomputing:sidewinder:5.2.0.03 cpe:/h:securecomputing:sidewinder:5.2.0.04 cpe:/h:securecomputing:sidewinder:5.2.1 cpe:/h:securecomputing:sidewinder:5.2.1.02 cpe:/h:sun:crypto_accelerator_4000:1.0 cpe:/h:symantec:clientless_vpn_gateway_4400:5.0 cpe:/o:apple:mac_os_x:10.3.3 cpe:/o:apple:mac_os_x_server:10.3.3 cpe:/o:bluecoat:cacheos_ca_sa:4.1.10 cpe:/o:bluecoat:cacheos_ca_sa:4.1.12 cpe:/o:cisco:ios:12.1%2811%29e cpe:/o:cisco:ios:12.1%2811b%29e cpe:/o:cisco:ios:12.1%2811b%29e12 cpe:/o:cisco:ios:12.1%2811b%29e14 cpe:/o:cisco:ios:12.1%2813%29e9 cpe:/o:cisco:ios:12.1%2819%29e1 cpe:/o:cisco:ios:12.2%2814%29sy cpe:/o:cisco:ios:12.2%2814%29sy1 cpe:/o:cisco:ios:12.2sy cpe:/o:cisco:ios:12.2za cpe:/o:cisco:pix_firewall_software:6.0 cpe:/o:cisco:pix_firewall_software:6.0%281%29 cpe:/o:cisco:pix_firewall_software:6.0%282%29 cpe:/o:cisco:pix_firewall_software:6.0%283%29 cpe:/o:cisco:pix_firewall_software:6.0%284%29 cpe:/o:cisco:pix_firewall_software:6.0%284.101%29 cpe:/o:cisco:pix_firewall_software:6.1 cpe:/o:cisco:pix_firewall_software:6.1%281%29 cpe:/o:cisco:pix_firewall_software:6.1%282%29 cpe:/o:cisco:pix_firewall_software:6.1%283%29 cpe:/o:cisco:pix_firewall_software:6.1%284%29 cpe:/o:cisco:pix_firewall_software:6.1%285%29 cpe:/o:cisco:pix_firewall_software:6.2 cpe:/o:cisco:pix_firewall_software:6.2%281%29 cpe:/o:cisco:pix_firewall_software:6.2%282%29 cpe:/o:cisco:pix_firewall_software:6.2%283%29 cpe:/o:cisco:pix_firewall_software:6.2%283.100%29 cpe:/o:cisco:pix_firewall_software:6.3 cpe:/o:cisco:pix_firewall_software:6.3%281%29 cpe:/o:cisco:pix_firewall_software:6.3%282%29 cpe:/o:cisco:pix_firewall_software:6.3%283.102%29 cpe:/o:cisco:pix_firewall_software:6.3%283.109%29 cpe:/o:freebsd:freebsd:4.8 cpe:/o:freebsd:freebsd:4.8:releng cpe:/o:freebsd:freebsd:4.9 cpe:/o:freebsd:freebsd:5.1 cpe:/o:freebsd:freebsd:5.1:release cpe:/o:freebsd:freebsd:5.1:releng cpe:/o:freebsd:freebsd:5.2 cpe:/o:freebsd:freebsd:5.2.1:release cpe:/o:hp:hp-ux:8.05 cpe:/o:hp:hp-ux:11.00 cpe:/o:hp:hp-ux:11.11 cpe:/o:hp:hp-ux:11.23 cpe:/o:openbsd:openbsd:3.3 cpe:/o:openbsd:openbsd:3.4 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:linux:7.2 cpe:/o:redhat:linux:7.3 cpe:/o:redhat:linux:8.0 cpe:/o:sco:openserver:5.0.6 cpe:/o:sco:openserver:5.0.7

CVE-2004-0112

2004-11-23T00:00:00.000-05:00

2018-10-30T12:26:18.123-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov NETBSD NetBSD-SA2004-005 SCO SCOSA-2004.10 CONECTIVA CLA-2004:834 CONFIRM http://docs.info.apple.com/article.html?artnum=61798 APPLE APPLE-SA-2005-08-17 APPLE APPLE-SA-2005-08-15 CONFIRM http://lists.apple.com/mhonarc/security-announce/msg00045.html BUGTRAQ 20040317 New OpenSSL releases fix denial of service attacks [17 March 2004] HP SSRT4717 GENTOO GLSA-200403-03 SUNALERT 57524 CIAC O-101 CISCO 20040317 Cisco OpenSSL Implementation Vulnerability CERT-VN VU#484726 MANDRAKE MDKSA-2004:023 SUSE SuSE-SA:2004:007 CONFIRM http://www.openssl.org/news/secadv_20040317.txt REDHAT RHSA-2004:120 REDHAT RHSA-2004:121 BID 9899 SLACKWARE SSA:2004-077 TRUSTIX 2004-0012 MISC http://www.uniras.gov.uk/vuls/2004/224012/index.htm CERT TA04-078A XF openssl-kerberos-ciphersuites-dos(15508) The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake that causes an out-of-bounds read.

cpe:/a:apache:http_server:2.0.35 cpe:/a:apache:http_server:2.0.36 cpe:/a:apache:http_server:2.0.37 cpe:/a:apache:http_server:2.0.38 cpe:/a:apache:http_server:2.0.39 cpe:/a:apache:http_server:2.0.40 cpe:/a:apache:http_server:2.0.41 cpe:/a:apache:http_server:2.0.42 cpe:/a:apache:http_server:2.0.43 cpe:/a:apache:http_server:2.0.44 cpe:/a:apache:http_server:2.0.45 cpe:/a:apache:http_server:2.0.46 cpe:/a:apache:http_server:2.0.47 cpe:/a:apache:http_server:2.0.48

CVE-2004-0113

2004-03-29T00:00:00.000-05:00

2017-10-09T21:30:17.737-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLSA-2004:839 MISC http://issues.apache.org/bugzilla/show_bug.cgi?id=27106 MLIST [apache-cvs] 20040307 cvs commit: httpd-2.0/modules/ssl ssl_engine_io.c BUGTRAQ 20040325 LNSA-#2004-0006: bug workaround for Apache 2.0.48 APPLE APPLE-SA-2004-05-03 HP SSRT4717 GENTOO GLSA-200403-04 CONFIRM http://www.apacheweek.com/features/security-20 MANDRAKE MDKSA-2004:043 REDHAT RHSA-2004:084 REDHAT RHSA-2004:182 BID 9826 TRUSTIX 2004-0017 XF apache-modssl-plain-dos(15419) MLIST [httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html MLIST [httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html Memory leak in ssl_engine_io.c for mod_ssl in Apache 2 before 2.0.49 allows remote attackers to cause a denial of service (memory consumption) via plain HTTP requests to the SSL port of an SSL-enabled server.

cpe:/o:freebsd:freebsd:5.2 cpe:/o:netbsd:netbsd:1.3 cpe:/o:openbsd:openbsd:2.6

CVE-2004-0114

2004-03-03T00:00:00.000-05:00

2017-10-09T21:30:17.797-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FREEBSD FreeBSD-SA-04:02 NETBSD NetBSD-SA2004-004 BUGTRAQ 20040205 [PINE-CERT-20040201] reference count overflow in shmat() CONFIRM http://www.openbsd.org/errata33.html#sysvshm MISC http://www.pine.nl/press/pine-cert-20040201.txt BID 9586 XF bsd-shmat-gain-privileges(15061) The shmat system call in the System V Shared Memory interface for FreeBSD 5.2 and earlier, NetBSD 1.3 and earlier, and OpenBSD 2.6 and earlier, does not properly decrement a shared memory segment's reference count when the vm_map_find function fails, which could allow local users to gain read or write access to a portion of kernel memory and gain privileges.

cpe:/a:microsoft:virtual_pc:6.0::mac cpe:/a:microsoft:virtual_pc:6.1::mac cpe:/a:microsoft:virtual_pc:6.2::mac

CVE-2004-0115

2004-03-03T00:00:00.000-05:00

2018-10-12T17:33:53.370-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

ATSTAKE A021004-1 CIAC O-076 BID 9632 MS MS04-005 XF virtual-pc-gain-privileges(15113) VirtualPC_Services in Microsoft Virtual PC for Mac 6.0 through 6.1 allows local attackers to truncate and overwrite arbitrary files, and execute arbitrary code, via a symlink attack on the VPCServices_Log temporary file.

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_xp::gold

CVE-2004-0116

2004-06-01T00:00:00.000-04:00

2018-10-12T17:33:53.917-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1009758 CIAC O-115 EEYE AD20040413A CERT-VN VU#417052 BID 10127 CERT TA04-104A MS MS04-012 XF win-rpcss-rpcmessage-dos(15708) An Activation function in the RPCSS Service involved with DCOM activation for Microsoft Windows 2000, XP, and 2003 allows remote attackers to cause a denial of service (memory consumption) via an activation request with a large length field.

cpe:/a:microsoft:netmeeting:3 cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_me cpe:/o:microsoft:windows_xp::gold

CVE-2004-0117

2004-06-01T00:00:00.000-04:00

2018-10-12T17:33:55.213-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CIAC O-114 CERT-VN VU#353956 CERT TA04-104A MS MS04-011 XF win-h323-bo(15710) Unknown vulnerability in the H.323 protocol implementation in Windows 98, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code.

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_nt:4.0

CVE-2004-0118

2004-06-01T00:00:00.000-04:00

2018-10-12T17:33:56.197-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20040413 EEYE: Windows VDM TIB Local Privilege Escalation CIAC O-114 EEYE AD20040413E CERT-VN VU#783748 BID 10117 CERT TA04-104A MS MS04-011 XF win-vdm-gain-privileges(15714) The component for the Virtual DOS Machine (VDM) subsystem in Windows NT 4.0 and Windows 2000 does not properly validate system structures, which allows local users to access protected kernel memory and execute arbitrary code.

cpe:/a:microsoft:internet_information_server cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_xp::gold

CVE-2004-0119

2004-06-01T00:00:00.000-04:00

2018-10-12T17:33:57.213-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

VULNWATCH 20040414 NSFOCUS SA2004-01 : DoS Vulnerability in Microsoft Windows SPNEGO Protocol Decoding CIAC O-114 CERT-VN VU#638548 BID 10113 CERT TA04-104A MS MS04-011 XF win-spp-bo(15715) The Negotiate Security Software Provider (SSP) interface in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service (crash from null dereference) or execute arbitrary code via a crafted SPNEGO NegTokenInit request during authentication protocol selection.

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_xp::gold

CVE-2004-0120

2004-06-01T00:00:00.000-04:00

2018-10-12T17:33:58.337-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CIAC O-114 CERT-VN VU#150236 BID 10115 CERT TA04-104A MS MS04-011 XF ssl-message-dos(15712) The Microsoft Secure Sockets Layer (SSL) library, as used in Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service via malformed SSL messages.

cpe:/a:microsoft:office:xp cpe:/a:microsoft:office:xp:sp1 cpe:/a:microsoft:office:xp:sp2 cpe:/a:microsoft:outlook:2002 cpe:/a:microsoft:outlook:2002:sp1 cpe:/a:microsoft:outlook:2002:sp2

CVE-2004-0121

2004-04-15T00:00:00.000-04:00

2018-10-12T17:33:59.370-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040310 Outlook mailto: URL argument injection vulnerability CIAC O-096 IDEFENSE 20040309 Microsoft Outlook "mailto:" Parameter Passing Vulnerability CERT-VN VU#305206 BID 9827 CERT TA04-070A MS MS04-009 XF outlook-mailtourl-execute-code(15414) XF outlook-ms04009-patch(15429) Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs.

cpe:/a:microsoft:msn_messenger:6.0 cpe:/a:microsoft:msn_messenger:6.1

CVE-2004-0122

2004-04-15T00:00:00.000-04:00

2018-10-12T17:34:00.620-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CERT-VN VU#688094 BID 9828 MS MS04-010 XF msn-request-view-files(15415) XF msn-ms04010-patch(15427) Microsoft MSN Messenger 6.0 and 6.1 does not properly handle certain requests, which allows remote attackers to read arbitrary files.

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_98se cpe:/o:microsoft:windows_me cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_xp::gold

CVE-2004-0123

2004-06-01T00:00:00.000-04:00

2018-10-12T17:34:01.527-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CIAC O-114 CERT-VN VU#255924 BID 10118 CERT TA04-104A MS MS04-011 XF win-asn1-double-free(15713) Double free vulnerability in the ASN.1 library as used in Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003, allows remote attackers to cause a denial of service and possibly execute arbitrary code.

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0::server cpe:/o:microsoft:windows_nt:4.0::terminal_server cpe:/o:microsoft:windows_nt:4.0::workstation cpe:/o:microsoft:windows_xp::gold

CVE-2004-0124

2004-06-01T00:00:00.000-04:00

2018-10-12T17:34:02.790-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov CIAC O-115 CERT-VN VU#212892 BID 10121 CERT TA04-104A MS MS04-012 XF win-objectidentifier-open-port(15711) The DCOM RPC interface for Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to cause network communications via an "alter context" call that contains additional data, aka the "Object Identity Vulnerability."

cpe:/o:freebsd:freebsd:4.0 cpe:/o:freebsd:freebsd:4.0:alpha cpe:/o:freebsd:freebsd:4.0:releng cpe:/o:freebsd:freebsd:4.1 cpe:/o:freebsd:freebsd:4.1.1 cpe:/o:freebsd:freebsd:4.1.1:release cpe:/o:freebsd:freebsd:4.1.1:stable cpe:/o:freebsd:freebsd:4.2 cpe:/o:freebsd:freebsd:4.2:stable cpe:/o:freebsd:freebsd:4.3 cpe:/o:freebsd:freebsd:4.3:release cpe:/o:freebsd:freebsd:4.3:release_p38 cpe:/o:freebsd:freebsd:4.3:releng cpe:/o:freebsd:freebsd:4.3:stable cpe:/o:freebsd:freebsd:4.4 cpe:/o:freebsd:freebsd:4.4:release_p42 cpe:/o:freebsd:freebsd:4.4:releng cpe:/o:freebsd:freebsd:4.4:stable cpe:/o:freebsd:freebsd:4.5 cpe:/o:freebsd:freebsd:4.5:release cpe:/o:freebsd:freebsd:4.5:release_p32 cpe:/o:freebsd:freebsd:4.5:releng cpe:/o:freebsd:freebsd:4.5:stable cpe:/o:freebsd:freebsd:4.6 cpe:/o:freebsd:freebsd:4.6:release cpe:/o:freebsd:freebsd:4.6:release_p20 cpe:/o:freebsd:freebsd:4.6:releng cpe:/o:freebsd:freebsd:4.6:stable cpe:/o:freebsd:freebsd:4.6.2 cpe:/o:freebsd:freebsd:4.7 cpe:/o:freebsd:freebsd:4.7:release cpe:/o:freebsd:freebsd:4.7:release_p17 cpe:/o:freebsd:freebsd:4.7:releng cpe:/o:freebsd:freebsd:4.7:stable cpe:/o:freebsd:freebsd:4.8 cpe:/o:freebsd:freebsd:4.8:pre-release cpe:/o:freebsd:freebsd:4.8:release_p6 cpe:/o:freebsd:freebsd:4.8:releng cpe:/o:freebsd:freebsd:4.9 cpe:/o:freebsd:freebsd:4.9:pre-release cpe:/o:freebsd:freebsd:4.9:releng cpe:/o:freebsd:freebsd:4.10

CVE-2004-0125

2004-08-06T00:00:00.000-04:00

2017-07-10T21:29:55.103-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov FREEBSD FreeBSD-SA-04:12 BID 10485 XF freebsd-jailed-table-modify(16342) The jail system call in FreeBSD 4.x before 4.10-RELEASE does not verify that an attempt to manipulate routing tables originated from a non-jailed process, which could allow local users to modify the routing table.

cpe:/o:freebsd:freebsd:5.1 cpe:/o:freebsd:freebsd:5.1:release cpe:/o:freebsd:freebsd:5.2 cpe:/o:freebsd:freebsd:5.2.1:release

CVE-2004-0126

2004-03-29T00:00:00.000-05:00

2017-10-09T21:30:18.047-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FREEBSD FreeBSD-SA-04:03 BID 9762 XF freebsd-jailattach-gain-privileges(15344) The jail_attach system call in FreeBSD 5.1 and 5.2 changes the directory of a calling process even if the process doesn't have permission to change directory, which allows local users to gain read/write privileges to files and directories within another jail.

cpe:/a:phpgedview:phpgedview:2.52.3 cpe:/a:phpgedview:phpgedview:2.60 cpe:/a:phpgedview:phpgedview:2.61 cpe:/a:phpgedview:phpgedview:2.61.1 cpe:/a:phpgedview:phpgedview:2.65 cpe:/a:phpgedview:phpgedview:2.65.1

CVE-2004-0127

2004-03-03T00:00:00.000-05:00

2017-07-10T21:29:55.167-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040129 PHP Code Injection Vulnerabilities in phpGedView 2.65.1 and prior BID 9529 SECTRACK 1008892 XF phpgedview-editconfig-directory-traversal(15129) Directory traversal vulnerability in editconfig_gedcom.php for phpGedView 2.65.1 and earlier allows remote attackers to read arbitrary files or execute arbitrary PHP programs on the server via .. (dot dot) sequences in the gedcom_config parameter.

CVE-2004-0128

2004-03-03T00:00:00.000-05:00

2017-10-09T21:30:18.127-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://sourceforge.net/project/shownotes.php?release_id=141517 BUGTRAQ 20040129 PHP Code Injection Vulnerabilities in phpGedView 2.65.1 and prior BID 9531 XF phpgedview-gedfilconf-file-include(14987) PHP remote file inclusion vulnerability in the GEDCOM configuration script for phpGedView 2.65.1 and earlier allows remote attackers to execute arbitrary PHP code by modifying the PGV_BASE_DIRECTORY parameter to reference a URL on a remote web server that contains a malicious theme.php script.

cpe:/a:phpmyadmin:phpmyadmin:2.0 cpe:/a:phpmyadmin:phpmyadmin:2.0.1 cpe:/a:phpmyadmin:phpmyadmin:2.0.2 cpe:/a:phpmyadmin:phpmyadmin:2.0.3 cpe:/a:phpmyadmin:phpmyadmin:2.0.4 cpe:/a:phpmyadmin:phpmyadmin:2.0.5 cpe:/a:phpmyadmin:phpmyadmin:2.1 cpe:/a:phpmyadmin:phpmyadmin:2.1.1 cpe:/a:phpmyadmin:phpmyadmin:2.1.2 cpe:/a:phpmyadmin:phpmyadmin:2.2.2 cpe:/a:phpmyadmin:phpmyadmin:2.2.3 cpe:/a:phpmyadmin:phpmyadmin:2.2.4 cpe:/a:phpmyadmin:phpmyadmin:2.2.5 cpe:/a:phpmyadmin:phpmyadmin:2.2.6 cpe:/a:phpmyadmin:phpmyadmin:2.2_pre1 cpe:/a:phpmyadmin:phpmyadmin:2.2_rc1 cpe:/a:phpmyadmin:phpmyadmin:2.2_rc2 cpe:/a:phpmyadmin:phpmyadmin:2.2_rc3 cpe:/a:phpmyadmin:phpmyadmin:2.3.1 cpe:/a:phpmyadmin:phpmyadmin:2.3.2 cpe:/a:phpmyadmin:phpmyadmin:2.4.0 cpe:/a:phpmyadmin:phpmyadmin:2.5.0 cpe:/a:phpmyadmin:phpmyadmin:2.5.1 cpe:/a:phpmyadmin:phpmyadmin:2.5.2 cpe:/a:phpmyadmin:phpmyadmin:2.5.4 cpe:/a:phpmyadmin:phpmyadmin:2.5.5 cpe:/a:phpmyadmin:phpmyadmin:2.5.5_pl1 cpe:/a:phpmyadmin:phpmyadmin:2.5.5_rc1 cpe:/a:phpmyadmin:phpmyadmin:2.5.5_rc2

CVE-2004-0129

2004-03-03T00:00:00.000-05:00

2017-10-09T21:30:18.187-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040203 Arbitrary File Disclosure Vulnerability in phpMyAdmin 2.5.5-pl1 and prior GENTOO GLSA-200402-05 CONFIRM http://sourceforge.net/forum/forum.php?forum_id=350228 CONFIRM http://www.phpmyadmin.net/home_page/relnotes.php?rel=0 BID 9564 XF phpmyadmin-dotdot-directory-traversal(15021) Directory traversal vulnerability in export.php in phpMyAdmin 2.5.5 and earlier allows remote attackers to read arbitrary files via .. (dot dot) sequences in the what parameter.

cpe:/a:phpgedview:phpgedview:2.65

CVE-2004-0130

2004-03-03T00:00:00.000-05:00

2017-07-10T21:29:55.213-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1008844 MISC http://www.netvigilance.com/advisory0001 MISC http://www.securiteam.com/unixfocus/5NP0M1PBPQ.html XF phpgedview-loginphp-path-disclosure(15128) login.php in phpGedView 2.65 and earlier allows remote attackers to obtain sensitive information via an HTTP request to login.php that does not contain the required username or password parameters, which causes the information to be leaked in an error message.

cpe:/a:gnu:radius:1.1

CVE-2004-0131

2004-03-03T00:00:00.000-05:00

2017-10-09T21:30:18.237-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://ftp.gnu.org/gnu/radius/radius-1.2.tar.gz IDEFENSE 20040204 GNU Radius Remote Denial of Service Vulnerability CERT-VN VU#277396 BID 9578 XF radius-radprintrequest-dos(15046) The rad_print_request function in logger.c for GNU Radius daemon (radiusd) before 1.2 allows remote attackers to cause a denial of service (crash) via a UDP packet with an Acct-Status-Type attribute without a value and no Acct-Session-Id attribute, which causes a null dereference.

cpe:/a:visualshapers:ezcontents:1.40 cpe:/a:visualshapers:ezcontents:1.41 cpe:/a:visualshapers:ezcontents:1.42 cpe:/a:visualshapers:ezcontents:1.43 cpe:/a:visualshapers:ezcontents:1.44 cpe:/a:visualshapers:ezcontents:1.45 cpe:/a:visualshapers:ezcontents:1.45b cpe:/a:visualshapers:ezcontents:2.0.1 cpe:/a:visualshapers:ezcontents:2.0.2 cpe:/a:visualshapers:ezcontents:2.0_rc1 cpe:/a:visualshapers:ezcontents:2.0_rc2 cpe:/a:visualshapers:ezcontents:2.0_rc3

CVE-2004-0132

2004-03-03T00:00:00.000-05:00

2017-07-10T21:29:55.260-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040210 PHP Code Injection Vulnerabilities in ezContents 2.0.2 and prior XF ezcontents-multiple-file-include(15135) Multiple PHP remote file inclusion vulnerabilities in ezContents 2.0.2 and earlier allow remote attackers to execute arbitrary PHP code from a remote web server, as demonstrated using (1) the GLOBALS[rootdp] parameter to db.php, or (2) the GLOBALS[language_home] parameter to archivednews.php, and a malicious version of lang_admin.php.

cpe:/o:linux:linux_kernel:2.4.0

CVE-2004-0133

2004-06-01T00:00:00.000-04:00

2017-07-10T21:29:55.323-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SGI 20040405-01-U TRUSTIX 2004-0020 GENTOO GLSA-200407-02 ENGARDE ESA-20040428-004 MANDRAKE MDKSA-2004:029 BID 10151 XF linux-xfs-info-disclosure(15901) The XFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the XFS file system, which allows local users to obtain sensitive information by reading the raw device.

CVE-2004-0134

2004-08-18T00:00:00.000-04:00

2017-07-10T21:29:55.370-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SGI 20040507-01-P BID 10418 XF irix-cpr-gain-privileges(16259) cpr (libcpr) in SGI IRIX before 6.5.25 allows local users to gain privileges by loading a user provided library while restarting the checkpointed process.

cpe:/o:sgi:irix:3.2 cpe:/o:sgi:irix:3.3 cpe:/o:sgi:irix:3.3.1 cpe:/o:sgi:irix:3.3.2 cpe:/o:sgi:irix:3.3.3 cpe:/o:sgi:irix:4.0 cpe:/o:sgi:irix:4.0.1 cpe:/o:sgi:irix:4.0.1t cpe:/o:sgi:irix:4.0.2 cpe:/o:sgi:irix:4.0.3 cpe:/o:sgi:irix:4.0.4 cpe:/o:sgi:irix:4.0.4b cpe:/o:sgi:irix:4.0.4t cpe:/o:sgi:irix:4.0.5 cpe:/o:sgi:irix:4.0.5_iop cpe:/o:sgi:irix:4.0.5_ipr cpe:/o:sgi:irix:4.0.5a cpe:/o:sgi:irix:4.0.5b cpe:/o:sgi:irix:4.0.5e cpe:/o:sgi:irix:4.0.5f cpe:/o:sgi:irix:4.0.5g cpe:/o:sgi:irix:4.0.5h cpe:/o:sgi:irix:5.0 cpe:/o:sgi:irix:5.0.1 cpe:/o:sgi:irix:5.1 cpe:/o:sgi:irix:5.1.1 cpe:/o:sgi:irix:5.2 cpe:/o:sgi:irix:5.3 cpe:/o:sgi:irix:5.3::xfs cpe:/o:sgi:irix:6.0 cpe:/o:sgi:irix:6.0.1 cpe:/o:sgi:irix:6.0.1::xfs cpe:/o:sgi:irix:6.1 cpe:/o:sgi:irix:6.2 cpe:/o:sgi:irix:6.3 cpe:/o:sgi:irix:6.4 cpe:/o:sgi:irix:6.5 cpe:/o:sgi:irix:6.5.1 cpe:/o:sgi:irix:6.5.2 cpe:/o:sgi:irix:6.5.2f cpe:/o:sgi:irix:6.5.2m cpe:/o:sgi:irix:6.5.3 cpe:/o:sgi:irix:6.5.3f cpe:/o:sgi:irix:6.5.3m cpe:/o:sgi:irix:6.5.4 cpe:/o:sgi:irix:6.5.4f cpe:/o:sgi:irix:6.5.4m cpe:/o:sgi:irix:6.5.5 cpe:/o:sgi:irix:6.5.5f cpe:/o:sgi:irix:6.5.5m cpe:/o:sgi:irix:6.5.6 cpe:/o:sgi:irix:6.5.6f cpe:/o:sgi:irix:6.5.6m cpe:/o:sgi:irix:6.5.7 cpe:/o:sgi:irix:6.5.7f cpe:/o:sgi:irix:6.5.7m cpe:/o:sgi:irix:6.5.8 cpe:/o:sgi:irix:6.5.8f cpe:/o:sgi:irix:6.5.8m cpe:/o:sgi:irix:6.5.9 cpe:/o:sgi:irix:6.5.9f cpe:/o:sgi:irix:6.5.9m cpe:/o:sgi:irix:6.5.10 cpe:/o:sgi:irix:6.5.10f cpe:/o:sgi:irix:6.5.10m cpe:/o:sgi:irix:6.5.11 cpe:/o:sgi:irix:6.5.11f cpe:/o:sgi:irix:6.5.11m cpe:/o:sgi:irix:6.5.12 cpe:/o:sgi:irix:6.5.12f cpe:/o:sgi:irix:6.5.12m cpe:/o:sgi:irix:6.5.13 cpe:/o:sgi:irix:6.5.13f cpe:/o:sgi:irix:6.5.13m cpe:/o:sgi:irix:6.5.14 cpe:/o:sgi:irix:6.5.14f cpe:/o:sgi:irix:6.5.14m cpe:/o:sgi:irix:6.5.15 cpe:/o:sgi:irix:6.5.15f cpe:/o:sgi:irix:6.5.15m cpe:/o:sgi:irix:6.5.16 cpe:/o:sgi:irix:6.5.16f cpe:/o:sgi:irix:6.5.16m cpe:/o:sgi:irix:6.5.17 cpe:/o:sgi:irix:6.5.17f cpe:/o:sgi:irix:6.5.17m cpe:/o:sgi:irix:6.5.18 cpe:/o:sgi:irix:6.5.18f cpe:/o:sgi:irix:6.5.18m cpe:/o:sgi:irix:6.5.19 cpe:/o:sgi:irix:6.5.19f cpe:/o:sgi:irix:6.5.19m cpe:/o:sgi:irix:6.5.20 cpe:/o:sgi:irix:6.5.20f cpe:/o:sgi:irix:6.5.20m cpe:/o:sgi:irix:6.5.21 cpe:/o:sgi:irix:6.5.21f cpe:/o:sgi:irix:6.5.21m cpe:/o:sgi:irix:6.5.22 cpe:/o:sgi:irix:6.5.22m cpe:/o:sgi:irix:6.5.23 cpe:/o:sgi:irix:6.5.24 cpe:/o:sgi:irix:6.5_20

CVE-2004-0135

2004-08-06T00:00:00.000-04:00

2017-07-10T21:29:55.447-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SGI 20040601-01-P XF irix-sgiioprobe-gain-privileges(16413) The syssgi SGI_IOPROBE system call in IRIX 6.5.20 through 6.5.24 allows local users to gain privileges by reading and writing to kernel memory.

cpe:/o:sgi:irix:6.5.20f cpe:/o:sgi:irix:6.5.20m cpe:/o:sgi:irix:6.5.21f cpe:/o:sgi:irix:6.5.21m cpe:/o:sgi:irix:6.5.22 cpe:/o:sgi:irix:6.5.23 cpe:/o:sgi:irix:6.5.24 cpe:/o:sgi:irix:6.5.25

CVE-2004-0136

2004-08-06T00:00:00.000-04:00

2017-07-10T21:29:55.493-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov SGI 20040601-01-P BID 10547 XF irix-mapelf32exec-dos(16416) The mapelf32exec function call in IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system crash) via a "corrupted binary."

cpe:/o:sgi:irix:6.5.20f cpe:/o:sgi:irix:6.5.20m cpe:/o:sgi:irix:6.5.21f cpe:/o:sgi:irix:6.5.21m cpe:/o:sgi:irix:6.5.22 cpe:/o:sgi:irix:6.5.23 cpe:/o:sgi:irix:6.5.24 cpe:/o:sgi:irix:6.5.25

CVE-2004-0137

2004-08-06T00:00:00.000-04:00

2017-07-10T21:29:55.557-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov SGI 20040601-01-P BID 10549 XF irix-page-dos(16417) Unknown vulnerability in init for IRIX 6.5.20 through 6.5.24 allows local users to cause a denial of service (system panic) as a result of "page invalidation issues."

cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.4.1 cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:linux:linux_kernel:2.4.3 cpe:/o:linux:linux_kernel:2.4.4 cpe:/o:linux:linux_kernel:2.4.5 cpe:/o:linux:linux_kernel:2.4.6 cpe:/o:linux:linux_kernel:2.4.7 cpe:/o:linux:linux_kernel:2.4.8 cpe:/o:linux:linux_kernel:2.4.9 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.24

CVE-2004-0138

2004-12-31T00:00:00.000-05:00

2017-10-10T21:29:21.857-04:00

4.9

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.17_2.4.17-1woody4_ia64.changes CONFIRM http://kernel.org/pub/linux/kernel/v2.4/ChangeLog-2.4.25 CONFIRM http://linux.bkbits.net:8080/linux-2.4/cset@4021346f79nBb-4X_usRikR3Iyb4Vg DEBIAN DSA-1067 DEBIAN DSA-1069 DEBIAN DSA-1070 DEBIAN DSA-1082 REDHAT RHSA-2004:504 REDHAT RHSA-2004:549 BID 18174 XF linux-kernel-elfloader-dos(43124) The ELF loader in Linux kernel 2.4 before 2.4.25 allows local users to cause a denial of service (crash) via a crafted ELF file with an interpreter with an invalid arch (architecture), which triggers a BUG() when an invalid VMA is unmapped.

cpe:/o:sgi:irix:6.5.22 cpe:/o:sgi:irix:6.5.23 cpe:/o:sgi:irix:6.5.24 cpe:/o:sgi:irix:6.5.25

CVE-2004-0139

2005-01-10T00:00:00.000-05:00

2017-07-10T21:29:55.667-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov SGI 20040905-01-P BID 11276 XF irix-bsda-kernel(17547) Unknown vulnerability in the bsd.a kernel networking for SGI IRIX 6.5.22 through 6.5.25, and possibly earlier versions, in which "t_unbind changes t_bind's behavior," has unknown impact and attack vectors.

CVE-2004-0140

2017-05-11T10:29:01.480-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

CVE-2004-0141

2017-05-11T10:29:01.493-04:00

2017-05-11T10:29:01.510-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

CVE-2004-0142

2017-05-11T10:29:01.527-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

cpe:/a:nokia:6310i

CVE-2004-0143

2004-03-03T00:00:00.000-05:00

2017-07-10T21:29:55.730-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov VULNWATCH 20040209 ptl-2004-01: Multiple vulnerabilities in Nokia phones BUGTRAQ 20040209 ptl-2004-01: Multiple vulnerabilities in Nokia phones MISC http://www.pentest.co.uk/documents/ptl-2004-01.html BID 9603 XF nokia-obex-dos(15107) Multiple vulnerabilities in Nokia 6310(i) Mobile phones allow remote attackers to cause a denial of service (reset) via malformed Bluetooth OBject EXchange (OBEX) messages, probably triggering buffer overflows.

CVE-2004-0144

2017-05-11T10:29:01.540-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

CVE-2004-0145

2017-05-11T10:29:01.573-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

CVE-2004-0146

2017-05-11T10:29:01.587-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

CVE-2004-0147

2017-05-11T10:29:01.603-04:00

2017-05-11T10:29:01.620-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

cpe:/a:sgi:propack:2.3 cpe:/a:sgi:propack:2.4 cpe:/a:washington_university:wu-ftpd:2.4.1 cpe:/a:washington_university:wu-ftpd:2.4.2_beta2::academ cpe:/a:washington_university:wu-ftpd:2.4.2_beta18::academ cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr4 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr5 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr6 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr7 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr8 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr9 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr10 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr11 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr12 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr13 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr14 cpe:/a:washington_university:wu-ftpd:2.4.2_beta18_vr15 cpe:/a:washington_university:wu-ftpd:2.4.2_vr16 cpe:/a:washington_university:wu-ftpd:2.4.2_vr17 cpe:/a:washington_university:wu-ftpd:2.5.0 cpe:/a:washington_university:wu-ftpd:2.6.0 cpe:/a:washington_university:wu-ftpd:2.6.1 cpe:/a:washington_university:wu-ftpd:2.6.2

CVE-2004-0148

2004-04-15T00:00:00.000-04:00

2018-05-02T21:29:24.020-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

HP SSRT4704 SUNALERT 102356 DEBIAN DSA-457 FRSIRT ADV-2006-1867 REDHAT RHSA-2004:096 BID 9832 XF wuftpd-restrictedgid-gain-access(15423) wu-ftpd 2.6.2 and earlier, with the restricted-gid option enabled, allows local users to bypass access restrictions by changing the permissions to prevent access to their home directory, which causes wu-ftpd to use the root directory instead.

cpe:/a:xboing:xboing:2.4

CVE-2004-0149

2004-05-04T00:00:00.000-04:00

2017-07-10T21:29:55.790-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

DEBIAN DSA-451 BID 9764 XF xboing-bo(15347) Multiple buffer overflows in xboing before 2.4 allow local users to gain privileges.

cpe:/a:python_software_foundation:python:2.2 cpe:/a:python_software_foundation:python:2.2.1

CVE-2004-0150

2004-04-15T00:00:00.000-04:00

2017-10-09T21:30:18.297-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

DEBIAN DSA-458 GENTOO GLSA-200409-03 MANDRAKE MDKSA-2004:019 BID 9836 XF python-getaddrinfo-bo(15409) Buffer overflow in the getaddrinfo function in Python 2.2 before 2.2.2, when IPv6 support is disabled, allows remote attackers to execute arbitrary code via an IPv6 address that is obtained using DNS.

cpe:/a:xintercepttalk:xitalk:1.1.11

CVE-2004-0151

2004-04-15T00:00:00.000-04:00

2017-07-10T21:29:55.837-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://shellcode.org/Advisories/XITALK.txt DEBIAN DSA-462 BID 9851 XF xitalk-gain-privileges(15456) Unknown vulnerability in xitalk 1.1.11 and earlier allows local users to execute arbitrary commands.

cpe:/a:emil:emil:2.0.4 cpe:/a:emil:emil:2.0.5 cpe:/a:emil:emil:2.1.0_beta9

CVE-2004-0152

2004-04-15T00:00:00.000-04:00

2017-07-10T21:29:55.900-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040325 Re: [SECURITY] [DSA 468-1] New emil packages fix multiple vulnerabilities DEBIAN DSA-468 XF emil-email-bo(15601) Multiple stack-based buffer overflows in (1) the encode_mime function, (2) the encode_uuencode function, (3) or the decode_uuencode function for emil 2.1.0 and earlier allow remote attackers to execute arbitrary code via e-mail messages containing attachments with filenames.

cpe:/a:emil:emil:2.0.4 cpe:/a:emil:emil:2.0.5 cpe:/a:emil:emil:2.1.0_beta9

CVE-2004-0153

2004-04-15T00:00:00.000-04:00

2017-07-10T21:29:55.947-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040325 Re: [SECURITY] [DSA 468-1] New emil packages fix multiple vulnerabilities DEBIAN DSA-468 XF emil-format-string(15602) Multiple format string vulnerabilities in emil 2.1.0 and earlier may allow remote attackers to execute arbitrary code by triggering certain error messages.

cpe:/a:nfs:nfs-utils:1.0 cpe:/a:nfs:nfs-utils:1.0.1 cpe:/a:nfs:nfs-utils:1.0.3 cpe:/a:nfs:nfs-utils:1.0.4 cpe:/a:nfs:nfs-utils:1.0.6

CVE-2004-0154

2004-06-14T00:00:00.000-04:00

2017-10-10T21:29:21.903-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://bugzilla.redhat.com/bugzilla/long_list.cgi?buglist=114535 REDHAT RHSA-2004:072 BID 9813 TRUSTIX 2004-0009 XF nfs-utils-dns-dos(15418) rpc.mountd in nfs-utils after 1.0.3 and before 1.0.6 allows attackers to cause a denial of service (crash) via an NFS mount of a directory from a client whose reverse DNS lookup name is different from the forward lookup name.

cpe:/a:kame:racoon

CVE-2004-0155

2004-06-01T00:00:00.000-04:00

2017-10-10T21:29:21.980-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SCO SCOSA-2005.10 BUGTRAQ 20040407 CAN-2004-0155: The KAME IKE Daemon Racoon does not verify RSA Signatures during Phase 1, allows man-in-the-middle attacks and unauthorized connections APPLE APPLE-SA-2004-05-03 GENTOO GLSA-200406-17 CERT-VN VU#552398 MANDRAKE MDKSA-2004:069 MANDRAKE MDKSA-2004:027 REDHAT RHSA-2004:165 BID 10072 The KAME IKE Daemon Racoon, when authenticating a peer during Phase 1, validates the X.509 certificate but does not verify the RSA signature authentication, which allows remote attackers to establish unauthorized IP connections or conduct man-in-the-middle attacks using a valid, trusted X.509 certificate.

cpe:/a:ssmtp:ssmtp:2.49

CVE-2004-0156

2004-06-01T00:00:00.000-04:00

2017-07-10T21:29:56.057-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040507 [OpenPKG-SA-2004.020] OpenPKG Security Advisory (ssmtp) GENTOO GLSA-200404-18 SECTRACK 1009788 DEBIAN DSA-485 BID 10150 XF ssmtp-die-logevent-format-string(15872) Format string vulnerabilities in the (1) die or (2) log_event functions for ssmtp before 2.50.6 allow remote mail relays to cause a denial of service and possibly execute arbitrary code.

cpe:/a:xonix:xonix:1.4

CVE-2004-0157

2004-06-01T00:00:00.000-04:00

2017-07-10T21:29:56.103-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SECTRACK 1009789 MISC http://shellcode.org/Advisories/XONIX.txt DEBIAN DSA-484 BID 10149 XF xonix-privilege-dropping(15873) x11.c in xonix 1.4 and earlier uses the current working directory to find and execute the rmail program, which allows local users to execute arbitrary code by modifying the path to point to a malicious rmail program.

cpe:/a:lgames:lbreakout2:2.0 cpe:/a:lgames:lbreakout2:2.0.1 cpe:/a:lgames:lbreakout2:2.1 cpe:/a:lgames:lbreakout2:2.1.1 cpe:/a:lgames:lbreakout2:2.1.2 cpe:/a:lgames:lbreakout2:2.2 cpe:/a:lgames:lbreakout2:2.2.1 cpe:/a:lgames:lbreakout2:2.2.2

CVE-2004-0158

2004-03-29T00:00:00.000-05:00

2017-07-10T21:29:56.183-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040222 lbreakout2 < 2.4beta-2 local exploit CONFIRM http://security.debian.org/pool/updates/main/l/lbreakout2/lbreakout2_2.2.2-1woody1.diff.gz DEBIAN DSA-445 BID 9712 XF breakout2-home-bo(15229) Buffer overflow in lbreakout2 allows local users to gain 'games' group privileges via a large HOME environment variable to (1) editor.c, (2) theme.c, (3) manager.c, (4) config.c, (5) game.c, (6) levels.c, or (7) main.c.

cpe:/a:samhain_labs:hsftp:1.4 cpe:/a:samhain_labs:hsftp:1.5 cpe:/a:samhain_labs:hsftp:1.6 cpe:/a:samhain_labs:hsftp:1.7 cpe:/a:samhain_labs:hsftp:1.9 cpe:/a:samhain_labs:hsftp:1.10 cpe:/a:samhain_labs:hsftp:1.11

CVE-2004-0159

2004-03-15T00:00:00.000-05:00

2017-10-09T21:30:18.343-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

FULLDISC 20040223 Re: [SECURITY] [DSA 447-1] New hsftp packages fix format string vulnerability BID 9715 XF hsftp-format-string(15276) DEBIAN DSA-447 Format string vulnerability in hsftp 1.11 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via file names containing format string characters that are not properly handled when executing an "ls" command.

cpe:/a:synaesthesia:synaesthesia:2.1.0 cpe:/a:synaesthesia:synaesthesia:2.1.1 cpe:/a:synaesthesia:synaesthesia:2.1.2 cpe:/a:synaesthesia:synaesthesia:2.2

CVE-2004-0160

2004-03-29T00:00:00.000-05:00

2017-10-09T21:30:18.390-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

DEBIAN DSA-446 BID 9713 XF synaesthesia-configuration-symlink-attack(15279) Synaesthesia 2.2 and earlier allows local users to execute arbitrary code via a symlink attack on the configuration file.

CVE-2004-0161

2004-10-20T00:00:00.000-04:00

2017-07-10T21:29:56.243-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040914 Corsaire Security Advisory - Multiple vendor MIME RFC2231 encoding issue MISC http://www.uniras.gov.uk/vuls/2004/380375/mime.htm XF mime-tools-parameter-encoding(9274) Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME messages that use RFC2231 encoding, which may be interpreted differently by mail clients.

CVE-2004-0162

2004-10-20T00:00:00.000-04:00

2017-07-10T21:29:56.307-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040914 Corsaire Security Advisory - Multiple vendor MIME RFC822 comment issue MISC http://www.uniras.gov.uk/vuls/2004/380375/mime.htm XF mime-rfc822-filtering-bypass(17332) Multiple content security gateway and antivirus products allow remote attackers to bypass content restrictions via MIME encapsulation that uses RFC822 comment fields, which may be interpreted as other fields by mail clients.

cpe:/a:sygate_technologies:secure_enterprise:3.5mr3

CVE-2004-0163

2004-09-28T00:00:00.000-04:00

2017-07-10T21:29:56.353-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040810 Corsaire Security Advisory - Sygate Secure Enterprise replay issue MISC http://www.corsaire.com/advisories/c031120-002.txt XF sse-replay-dos(16945) Sygate Secure Enterprise (SSE) 3.5MR3 and earlier does not change the key used to encrypt data, which allows remote attackers to cause a denial of service (resource exhaustion) by capturing a session and repeatedly replaying the session.

cpe:/a:kame:racoon:all_versions

CVE-2004-0164

2004-03-03T00:00:00.000-05:00

2017-10-10T21:29:22.043-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov NETBSD NetBSD-SA2004-001 APPLE APPLE-SA-2004-02-23 BUGTRAQ 20040113 unauthorized deletion of IPsec (and ISAKMP) SAs in racoon BUGTRAQ 20040114 Re: unauthorized deletion of IPsec (and ISAKMP) SAs in racoon BID 9416 BID 9417 XF openbsd-isakmp-invalidspi-delete-sa(14117) XF openbsd-isakmp-initialcontact-delete-sa(14118) KAME IKE daemon (racoon) does not properly handle hash values, which allows remote attackers to delete certificates via (1) a certain delete message that is not properly handled in isakmp.c or isakmp_inf.c, or (2) a certain INITIAL-CONTACT message that is not properly handled in isakmp_inf.c.

cpe:/o:apple:mac_os_x:10.1 cpe:/o:apple:mac_os_x:10.1.1 cpe:/o:apple:mac_os_x:10.1.2 cpe:/o:apple:mac_os_x:10.1.3 cpe:/o:apple:mac_os_x:10.1.4 cpe:/o:apple:mac_os_x:10.1.5 cpe:/o:apple:mac_os_x:10.2 cpe:/o:apple:mac_os_x:10.2.1 cpe:/o:apple:mac_os_x:10.2.2 cpe:/o:apple:mac_os_x:10.2.3 cpe:/o:apple:mac_os_x:10.2.4 cpe:/o:apple:mac_os_x:10.2.5 cpe:/o:apple:mac_os_x:10.2.6 cpe:/o:apple:mac_os_x:10.2.7 cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3 cpe:/o:apple:mac_os_x:10.3.1 cpe:/o:apple:mac_os_x:10.3.2 cpe:/o:apple:mac_os_x_server:10.1 cpe:/o:apple:mac_os_x_server:10.1.1 cpe:/o:apple:mac_os_x_server:10.1.2 cpe:/o:apple:mac_os_x_server:10.1.3 cpe:/o:apple:mac_os_x_server:10.1.4 cpe:/o:apple:mac_os_x_server:10.1.5 cpe:/o:apple:mac_os_x_server:10.2 cpe:/o:apple:mac_os_x_server:10.2.1 cpe:/o:apple:mac_os_x_server:10.2.2 cpe:/o:apple:mac_os_x_server:10.2.3 cpe:/o:apple:mac_os_x_server:10.2.4 cpe:/o:apple:mac_os_x_server:10.2.5 cpe:/o:apple:mac_os_x_server:10.2.6 cpe:/o:apple:mac_os_x_server:10.2.7 cpe:/o:apple:mac_os_x_server:10.2.8 cpe:/o:apple:mac_os_x_server:10.3 cpe:/o:apple:mac_os_x_server:10.3.1 cpe:/o:apple:mac_os_x_server:10.3.2

CVE-2004-0165

2004-03-15T00:00:00.000-05:00

2017-10-09T21:30:18.470-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2004-02-23 ATSTAKE A022304-1 CERT-VN VU#841742 BID 9730 XF macos-pppd-format-string(15297) Format string vulnerability in Point-to-Point Protocol (PPP) daemon (pppd) 2.4.0 for Mac OS X 10.3.2 and earlier allows remote attackers to read arbitrary pppd process data, including PAP or CHAP authentication credentials, to gain privileges.

cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x_server:10.2.8

CVE-2004-0166

2004-03-15T00:00:00.000-05:00

2017-07-10T21:29:56.463-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2004-02-23 CERT-VN VU#194238 XF macosx-safari-unknown(14993) Unknown vulnerability in Safari web browser for Mac OS X 10.2.8 related to "the display of URLs in the status bar."

cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3.2 cpe:/o:apple:mac_os_x_server:10.2.8 cpe:/o:apple:mac_os_x_server:10.3.2

CVE-2004-0167

2004-03-15T00:00:00.000-05:00

2018-09-26T11:59:03.123-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2018-09-25T13:27:09.703-04:00

ALLOWS_OTHER_ACCESS

APPLE APPLE-SA-2004-02-23 CERT-VN VU#578886 BID 9731 XF macos-diskarbitration-unknown(15300) DiskArbitration in Mac OS X 10.2.8 and 10.3.2 does not properly initialize writeable removable media.

cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3.2 cpe:/o:apple:mac_os_x_server:10.2.8 cpe:/o:apple:mac_os_x_server:10.3.2

CVE-2004-0168

2004-03-15T00:00:00.000-05:00

2018-09-26T11:58:54.513-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2018-09-25T13:29:37.537-04:00

APPLE APPLE-SA-2004-02-23 XF macos-corefoundation-unknown(15299) Unknown vulnerability in CoreFoundation for Mac OS X 10.3.2, related to "notification logging."

cpe:/a:apple:darwin_streaming_server:4.1.3

CVE-2004-0169

2004-03-15T00:00:00.000-05:00

2017-10-09T21:30:18.593-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2004-02-23 IDEFENSE 20040223 Darwin Streaming Server Remote Denial of Service Vulnerability CERT-VN VU#460350 BID 9735 XF darwin-describe-request-dos(15291) QuickTime Streaming Server in MacOS X 10.2.8 and 10.3.2 allows remote attackers to cause a denial of service (crash) via DESCRIBE requests with long User-Agent fields, which causes an Assert error to be triggered in the BufferIsFull function.

cpe:/o:freebsd:freebsd:4.6.2 cpe:/o:freebsd:freebsd:4.7 cpe:/o:freebsd:freebsd:4.8 cpe:/o:freebsd:freebsd:4.9 cpe:/o:freebsd:freebsd:5.0 cpe:/o:freebsd:freebsd:5.1 cpe:/o:freebsd:freebsd:5.2 cpe:/o:openbsd:openbsd:3.3 cpe:/o:openbsd:openbsd:3.4

CVE-2004-0171

2004-03-15T00:00:00.000-05:00

2017-10-09T21:30:18.673-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FREEBSD FreeBSD-SA-04:04 APPLE APPLE-SA-2004-05-28 IDEFENSE 20040302 FreeBSD Memory Buffer Exhaustion Denial of Service Vulnerability CERT-VN VU#395670 BID 9792 XF freebsd-mbuf-dos(15369) FreeBSD 5.1 and earlier, and Mac OS X before 10.3.4, allows remote attackers to cause a denial of service (resource exhaustion of memory buffers and system crash) via a large number of out-of-sequence TCP packets, which prevents the operating system from creating new connections.

cpe:/a:juan_cespedes:ltrace:0.3.10

CVE-2004-0172

2004-03-15T00:00:00.000-05:00

2017-07-10T21:29:56.573-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20031008 ltrace bug FULLDISC 20031008 ltrace bug SECTRACK 1007896 BID 8790 XF ltrace-searchforcommand-bo(13389) Heap-based buffer overflow in the search_for_command function of ltrace 0.3.10, if it is installed setuid, could allow local users to execute arbitrary code via a long filename. NOTE: It is unclear whether there are any packages that install ltrace as a setuid program, so this candidate might be REJECTed.

cpe:/a:apache:http_server:0.8.11 cpe:/a:apache:http_server:0.8.14 cpe:/a:apache:http_server:1.0 cpe:/a:apache:http_server:1.0.2 cpe:/a:apache:http_server:1.0.3 cpe:/a:apache:http_server:1.0.5 cpe:/a:apache:http_server:1.1 cpe:/a:apache:http_server:1.1.1 cpe:/a:apache:http_server:1.2 cpe:/a:apache:http_server:1.2.5 cpe:/a:apache:http_server:1.3

CVE-2004-0173

2004-04-15T00:00:00.000-04:00

2017-10-09T21:30:18.720-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://issues.apache.org/bugzilla/show_bug.cgi?id=26152 FULLDISC 20040224 STG Security Advisory: [SSA-20040217-06] Apache for cygwin directory traversal vulnerability BUGTRAQ 20040224 STG Security Advisory: [SSA-20040217-06] Apache for cygwin CONFIRM http://www.apacheweek.com/issues/04-03-12 BID 9733 XF apache-cygwin-directory-traversal(15293) Directory traversal vulnerability in Apache 1.3.29 and earlier, and Apache 2.0.48 and earlier, when running on Cygwin, allows remote attackers to read arbitrary files via a URL containing "..%5C" (dot dot encoded backslash) sequences.

cpe:/a:apache:http_server:2.0.49

CVE-2004-0174

2004-05-04T00:00:00.000-04:00

2017-10-10T21:29:22.120-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040319 [ANNOUNCE] Apache HTTP Server 2.0.49 Released (fwd) TRUSTIX 2004-0017 APPLE APPLE-SA-2004-05-03 BUGTRAQ 20040512 [OpenPKG-SA-2004.021] OpenPKG Security Advisory (apache) HP SSRT4717 GENTOO GLSA-200405-22 SUNALERT 101555 SUNALERT 57628 CONFIRM http://www.apache.org/dist/httpd/CHANGES_1.3 CERT-VN VU#132110 MANDRAKE MDKSA-2004:046 REDHAT RHSA-2004:405 BID 9921 SECTRACK 1009495 SLACKWARE SSA:2004-133 TRUSTIX 2004-0027 XF apache-socket-starvation-dos(15540) MLIST [httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html MLIST [httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html Apache 1.4.x before 1.3.30, and 2.0.x before 2.0.49, when using multiple listening sockets on certain platforms, allows remote attackers to cause a denial of service (blocked new connections) via a "short-lived connection on a rarely-accessed listening socket."

cpe:/a:openbsd:openssh:3.0 cpe:/a:openbsd:openssh:3.0.1 cpe:/a:openbsd:openssh:3.0.1p1 cpe:/a:openbsd:openssh:3.0.2 cpe:/a:openbsd:openssh:3.0.2p1 cpe:/a:openbsd:openssh:3.0p1 cpe:/a:openbsd:openssh:3.1 cpe:/a:openbsd:openssh:3.1p1 cpe:/a:openbsd:openssh:3.2 cpe:/a:openbsd:openssh:3.2.2p1 cpe:/a:openbsd:openssh:3.2.3p1 cpe:/a:openbsd:openssh:3.3 cpe:/a:openbsd:openssh:3.3p1 cpe:/a:openbsd:openssh:3.4 cpe:/a:openbsd:openssh:3.4p1

CVE-2004-0175

2004-08-18T00:00:00.000-04:00

2017-10-10T21:29:22.200-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov SCO SCOSA-2006.11 CONECTIVA CLSA-2004:831 CIAC O-212 CONFIRM http://www.juniper.net/support/security/alerts/adv59739.txt MANDRIVA MDKSA-2005:100 MANDRIVA MDVSA-2008:191 SUSE SuSE-SA:2004:009 REDHAT RHSA-2005:074 REDHAT RHSA-2005:106 REDHAT RHSA-2005:165 REDHAT RHSA-2005:481 REDHAT RHSA-2005:495 REDHAT RHSA-2005:562 REDHAT RHSA-2005:567 BID 9986 CONFIRM https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=120147 XF openssh-scp-file-overwrite(16323) Directory traversal vulnerability in scp for OpenSSH before 3.4p1 allows remote malicious servers to overwrite arbitrary files. NOTE: this may be a rediscovery of CVE-2000-0992.

cpe:/a:ethereal_group:ethereal:0.8.13 cpe:/a:ethereal_group:ethereal:0.8.14 cpe:/a:ethereal_group:ethereal:0.8.18 cpe:/a:ethereal_group:ethereal:0.8.19 cpe:/a:ethereal_group:ethereal:0.9 cpe:/a:ethereal_group:ethereal:0.9.1 cpe:/a:ethereal_group:ethereal:0.9.2 cpe:/a:ethereal_group:ethereal:0.9.3 cpe:/a:ethereal_group:ethereal:0.9.4 cpe:/a:ethereal_group:ethereal:0.9.5 cpe:/a:ethereal_group:ethereal:0.9.6 cpe:/a:ethereal_group:ethereal:0.9.7 cpe:/a:ethereal_group:ethereal:0.9.8 cpe:/a:ethereal_group:ethereal:0.9.9 cpe:/a:ethereal_group:ethereal:0.9.10 cpe:/a:ethereal_group:ethereal:0.9.11 cpe:/a:ethereal_group:ethereal:0.9.12 cpe:/a:ethereal_group:ethereal:0.9.13 cpe:/a:ethereal_group:ethereal:0.9.14 cpe:/a:ethereal_group:ethereal:0.9.15 cpe:/a:ethereal_group:ethereal:0.9.16 cpe:/a:ethereal_group:ethereal:0.10 cpe:/a:ethereal_group:ethereal:0.10.1 cpe:/a:ethereal_group:ethereal:0.10.2

CVE-2004-0176

2004-05-04T00:00:00.000-04:00

2017-10-10T21:29:22.293-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2004:835 BUGTRAQ 20040323 Advisory 03/2004: Multiple (13) Ethereal remote overflows BUGTRAQ 20040329 LNSA-#2004-0007: Multiple security problems in Ethereal BUGTRAQ 20040416 [OpenPKG-SA-2004.015] OpenPKG Security Advisory (ethereal) MISC http://security.e-matters.de/advisories/032004.html GENTOO GLSA-200403-07 DEBIAN DSA-511 CONFIRM http://www.ethereal.com/appnotes/enpa-sa-00013.html CERT-VN VU#119876 CERT-VN VU#125156 CERT-VN VU#433596 CERT-VN VU#591820 CERT-VN VU#644886 CERT-VN VU#659140 CERT-VN VU#740188 CERT-VN VU#864884 CERT-VN VU#931588 MANDRAKE MDKSA-2004:024 REDHAT RHSA-2004:136 REDHAT RHSA-2004:137 XF ethereal-multiple-dissectors-bo(15569) Multiple buffer overflows in Ethereal 0.8.13 to 0.10.2 allow remote attackers to cause a denial of service and possibly execute arbitrary code via the (1) NetFlow, (2) IGAP, (3) EIGRP, (4) PGM, (5) IrDA, (6) BGP, (7) ISUP, or (8) TCAP dissectors.

cpe:/o:linux:linux_kernel:2.4.0

CVE-2004-0177

2004-06-01T00:00:00.000-04:00

2017-10-10T21:29:22.370-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONECTIVA CLA-2004:846 MISC http://linux.bkbits.net:8080/linux-2.4/cset@4056b368s6vpJbGWxDD_LhQNYQrdzQ TRUSTIX 2004-0020 REDHAT RHSA-2004:166 GENTOO GLSA-200407-02 CIAC O-121 CIAC O-126 CIAC O-127 DEBIAN DSA-479 DEBIAN DSA-480 DEBIAN DSA-481 DEBIAN DSA-482 DEBIAN DSA-489 DEBIAN DSA-491 DEBIAN DSA-495 ENGARDE ESA-20040428-004 MANDRAKE MDKSA-2004:029 REDHAT RHSA-2004:504 REDHAT RHSA-2004:505 REDHAT RHSA-2005:293 BID 10152 FEDORA FLSA:2336 XF linux-ext3-info-disclosure(15867) The ext3 code in Linux 2.4.x before 2.4.26 does not properly initialize journal descriptor blocks, which causes an information leak in which in-memory data is written to the device for the ext3 file system, which allows privileged users to obtain portions of kernel memory by reading the raw device.

cpe:/o:linux:linux_kernel:2.4.0

CVE-2004-0178

2004-06-01T00:00:00.000-04:00

2017-10-10T21:29:22.450-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov SGI 20040804-01-U CONECTIVA CLA-2004:846 MISC http://linux.bkbits.net:8080/linux-2.4/cset@404ce5967rY2Ryu6Z_uNbYh643wuFA GENTOO GLSA-200407-02 CIAC O-121 CIAC O-127 CIAC O-193 DEBIAN DSA-479 DEBIAN DSA-480 DEBIAN DSA-481 DEBIAN DSA-482 DEBIAN DSA-489 DEBIAN DSA-491 DEBIAN DSA-495 MANDRAKE MDKSA-2004:029 REDHAT RHSA-2004:413 REDHAT RHSA-2004:437 BID 9985 XF linux-sound-blaster-dos(15868) The OSS code for the Sound Blaster (sb16) driver in Linux 2.4.x before 2.4.26, when operating in 16 bit mode, does not properly handle certain sample sizes, which allows local users to cause a denial of service (crash) via a sample with an odd number of bytes.

cpe:/a:cadaver:cadaver_webdav_client:0.20.0 cpe:/a:cadaver:cadaver_webdav_client:0.20.1 cpe:/a:cadaver:cadaver_webdav_client:0.20.2 cpe:/a:cadaver:cadaver_webdav_client:0.20.3 cpe:/a:cadaver:cadaver_webdav_client:0.20.4 cpe:/a:cadaver:cadaver_webdav_client:0.20.5 cpe:/a:cadaver:cadaver_webdav_client:0.21.0 cpe:/a:cadaver:cadaver_webdav_client:0.22.0 cpe:/a:cadaver:cadaver_webdav_client:0.22.1 cpe:/a:neon:neon_client_library:0.19.3 cpe:/a:neon:neon_client_library:0.23 cpe:/a:neon:neon_client_library:0.23.1 cpe:/a:neon:neon_client_library:0.23.2 cpe:/a:neon:neon_client_library:0.23.3 cpe:/a:neon:neon_client_library:0.23.4 cpe:/a:neon:neon_client_library:0.23.5 cpe:/a:neon:neon_client_library:0.23.6 cpe:/a:neon:neon_client_library:0.23.7 cpe:/a:neon:neon_client_library:0.23.8 cpe:/a:neon:neon_client_library:0.24 cpe:/a:neon:neon_client_library:0.24.1 cpe:/a:neon:neon_client_library:0.24.2 cpe:/a:neon:neon_client_library:0.24.3 cpe:/a:neon:neon_client_library:0.24.4 cpe:/a:openoffice:openoffice:1.1.2 cpe:/a:subversion:subversion

CVE-2004-0179

2004-06-01T00:00:00.000-04:00

2017-10-10T21:29:22.543-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SGI 20040404-01-U SUSE SuSE-SA:2004:009 SUSE SuSE-SA:2004:008 BUGTRAQ 20040416 [OpenPKG-SA-2004.016] OpenPKG Security Advisory (neon) BUGTRAQ 20040416 void.at - neon format string bugs GENTOO GLSA-200405-01 GENTOO GLSA-200405-04 DEBIAN DSA-487 MANDRAKE MDKSA-2004:032 REDHAT RHSA-2004:157 REDHAT RHSA-2004:158 REDHAT RHSA-2004:159 REDHAT RHSA-2004:160 BID 10136 FEDORA FEDORA-2004-1552 Multiple format string vulnerabilities in (1) neon 0.24.4 and earlier, and other products that use neon including (2) Cadaver, (3) Subversion, and (4) OpenOffice, allow remote malicious WebDAV servers to execute arbitrary code.

cpe:/a:cvs:cvs:1.10

CVE-2004-0180

2004-06-01T00:00:00.000-04:00

2018-05-02T21:29:24.177-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov FREEBSD FreeBSD-SA-04:07 CONFIRM ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/002_cvs.patch SGI 20040404-01-U FEDORA FEDORA-2004-1620 GENTOO GLSA-200404-13 DEBIAN DSA-486 MANDRAKE MDKSA-2004:028 REDHAT RHSA-2004:153 REDHAT RHSA-2004:154 SLACKWARE SSA:2004-108-02 XF cvs-rcs-create-files(15864) The client for CVS before 1.11 allows a remote malicious CVS server to create arbitrary files using certain RCS diff files that use absolute pathnames during checkouts or updates, a different vulnerability than CVE-2004-0405.

cpe:/o:linux:linux_kernel:2.4.0

CVE-2004-0181

2004-06-01T00:00:00.000-04:00

2017-10-10T21:29:22.717-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov TRUSTIX 2004-0020 GENTOO GLSA-200407-02 ENGARDE ESA-20040428-004 MANDRAKE MDKSA-2004:029 REDHAT RHSA-2004:504 REDHAT RHSA-2005:663 BID 10143 TURBO TLSA-2004-14 VUPEN ADV-2005-1878 XF linux-jfs-info-disclosure(15902) The JFS file system code in Linux 2.4.x has an information leak in which in-memory data is written to the device for the JFS file system, which allows local users to obtain sensitive information by reading the raw device.

cpe:/a:gnu:mailman:2.0.12

CVE-2004-0182

2004-06-01T00:00:00.000-04:00

2008-09-05T16:37:44.927-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

SGI 20040404-01-U REDHAT RHSA-2004:156 Mailman before 2.0.13 allows remote attackers to cause a denial of service (crash) via an email message with an empty subject field.

cpe:/a:lbl:tcpdump:3.8.1

CVE-2004-0183

2004-05-04T00:00:00.000-04:00

2017-10-10T21:29:22.777-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040330 R7-0017: TCPDUMP ISAKMP payload handling denial-of-service vulnerabilities SECTRACK 1009593 DEBIAN DSA-478 CERT-VN VU#240790 MISC http://www.rapid7.com/advisories/R7-0017.html REDHAT RHSA-2004:219 BID 10003 CONFIRM http://www.tcpdump.org/tcpdump-changes.txt TRUSTIX 2004-0015 FEDORA FEDORA-2004-1468 XF tcpdump-isakmp-delete-bo(15680) TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via ISAKMP packets containing a Delete payload with a large number of SPI's, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.

cpe:/a:lbl:tcpdump:3.8.1

CVE-2004-0184

2004-05-04T00:00:00.000-04:00

2017-10-10T21:29:22.857-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040330 R7-0017: TCPDUMP ISAKMP payload handling denial-of-service vulnerabilities SECTRACK 1009593 DEBIAN DSA-478 CERT-VN VU#492558 MISC http://www.rapid7.com/advisories/R7-0017.html REDHAT RHSA-2004:219 BID 10004 CONFIRM http://www.tcpdump.org/tcpdump-changes.txt TRUSTIX 2004-0015 FEDORA FEDORA-2004-1468 XF tcpdump-isakmp-integer-underflow(15679) Integer underflow in the isakmp_id_print for TCPDUMP 3.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with an Identification payload with a length that becomes less than 8 during byte order conversion, which causes an out-of-bounds read, as demonstrated by the Striker ISAKMP Protocol Test Suite.

cpe:/a:washington_university:wu-ftpd:2.6.2

CVE-2004-0185

2004-03-15T00:00:00.000-05:00

2017-10-09T21:30:18.797-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM ftp://ftp.wu-ftpd.org/pub/wu-ftpd/patches/apply_to_2.6.2/skeychallenge.patch MISC http://unixpunx.org/txt/exploits_archive/packetstorm/0310-advisories/wuftpd-skey.txt DEBIAN DSA-457 REDHAT RHSA-2004:096 MISC http://www.securiteam.com/unixfocus/6X00Q1P8KC.html BID 8893 XF wuftpd-skey-bo(13518) Buffer overflow in the skey_challenge function in ftpd.c for wu-ftp daemon (wu-ftpd) 2.6.2 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a s/key (SKEY) request with a long name.

cpe:/a:samba:samba:2.0 cpe:/a:samba:samba:3.0.0 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.0:test1 cpe:/o:linux:linux_kernel:2.6.0:test10 cpe:/o:linux:linux_kernel:2.6.0:test11 cpe:/o:linux:linux_kernel:2.6.0:test2 cpe:/o:linux:linux_kernel:2.6.0:test3 cpe:/o:linux:linux_kernel:2.6.0:test4 cpe:/o:linux:linux_kernel:2.6.0:test5 cpe:/o:linux:linux_kernel:2.6.0:test6 cpe:/o:linux:linux_kernel:2.6.0:test7 cpe:/o:linux:linux_kernel:2.6.0:test8 cpe:/o:linux:linux_kernel:2.6.0:test9 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6_test9_cvs

CVE-2004-0186

2004-03-15T00:00:00.000-05:00

2017-10-09T21:30:18.860-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040209 Samba 3.x + kernel 2.6.x local root vulnerability BUGTRAQ 20040211 Re: Samba 3.x + kernel 2.6.x local root vulnerability DEBIAN DSA-463 BID 9619 XF samba-smbmnt-gain-privileges(15131) smbmnt in Samba 2.x and 3.x on Linux 2.6, when installed setuid, allows local users to gain root privileges by mounting a Samba share that contains a setuid root program, whose setuid attributes are not cleared when the share is mounted.

CVE-2004-0187

2004-03-15T00:00:00.000-05:00

2008-09-10T15:25:27.837-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-0185. Reason: This candidate is a reservation duplicate of CVE-2004-0185. Notes: All CVE users should reference CVE-2004-0185 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/a:calife:calife:2.8.4_c cpe:/a:calife:calife:2.8.5

CVE-2004-0188

2004-03-15T00:00:00.000-05:00

2018-05-02T21:29:24.303-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040227 Calife heap corrupt / potential local root exploit DEBIAN DSA-461 BID 9756 BID 9776 XF calife-long-password-bo(15335) Heap-based buffer overflow in Calife 2.8.5 and earlier may allow local users to execute arbitrary code via a long password.

cpe:/a:squid:squid:2.0_patch2 cpe:/a:squid:squid:2.1_patch2 cpe:/a:squid:squid:2.3_stable5 cpe:/a:squid:squid:2.4 cpe:/a:squid:squid:2.4_stable7 cpe:/a:squid:squid:2.5_stable3 cpe:/a:squid:squid:2.5_stable4

CVE-2004-0189

2004-03-15T00:00:00.000-05:00

2017-10-09T21:30:18.970-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SCO SCOSA-2005.16 SGI 20040404-01-U CONECTIVA CLA-2004:838 BUGTRAQ 20040401 [OpenPKG-SA-2004.008] OpenPKG Security Advisory (squid) GENTOO GLSA-200403-11 DEBIAN DSA-474 MANDRAKE MDKSA-2004:025 REDHAT RHSA-2004:133 REDHAT RHSA-2004:134 BID 9778 CONFIRM http://www.squid-cache.org/Advisories/SQUID-2004_1.txt XF squid-urlregex-acl-bypass(15366) The "%xx" URL decoding function in Squid 2.5STABLE4 and earlier allows remote attackers to bypass url_regex ACLs via a URL with a NULL ("%00") character, which causes Squid to use only a portion of the requested URL when comparing it against the access control lists.

cpe:/h:symantec:firewall_vpn_appliance_100 cpe:/h:symantec:firewall_vpn_appliance_200 cpe:/h:symantec:firewall_vpn_appliance_200r

CVE-2004-0190

2004-03-15T00:00:00.000-05:00

2017-10-09T21:30:19.033-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20040216 Symantec FireWall/VPN Appliance model 200 leak of security BUGTRAQ 20040216 Symantec FireWall/VPN Appliance model 200 leak of security BID 9784 XF symantec-firewallvpn-password-plaintext(15212) Symantec FireWall/VPN Appliance model 200 records a cleartext password for the password administration page, which may be cached on the administrator's local system or in a proxy, which allows attackers to steal the password and gain privileges.

CVE-2004-0191

2004-03-15T00:00:00.000-05:00

2017-10-09T21:30:19.093-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=227417 BUGTRAQ 20040225 Sandblad #13: Cross-domain exploit on zombie document with event handlers HP SSRT4722 REDHAT RHSA-2004:110 REDHAT RHSA-2004:112 BID 9747 XF mozilla-event-handler-xss(15322) Mozilla before 1.4.2 executes Javascript events in the context of a new page while it is being loaded, allowing it to interact with the previous page (zombie document) and enable cross-domain and cross-site scripting (XSS) attacks, as demonstrated using onmousemove events.

cpe:/h:symantec:gateway_security_5400:2.0

CVE-2004-0192

2004-03-15T00:00:00.000-05:00

2017-07-10T21:29:57.400-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040227 Symantec Gateway Security Management Service Cross Site Scripting BID 9755 XF symantecgateway-error-xss(15330) Cross-site scripting (XSS) vulnerability in the Management Service for Symantec Gateway Security 2.0 allows remote attackers to steal cookies and hijack a management session via a /sgmi URL that contains malicious script, which is not quoted in the resulting error page.

cpe:/a:iss:blackice_agent_server:3.6eca cpe:/a:iss:blackice_pc_protection:3.6cbd cpe:/a:iss:blackice_server_protection:3.6cbz cpe:/a:iss:realsecure_desktop:3.6eca cpe:/a:iss:realsecure_desktop:3.6ecf cpe:/a:iss:realsecure_desktop:7.0ebg cpe:/a:iss:realsecure_desktop:7.0epk cpe:/a:iss:realsecure_guard:3.6ecb cpe:/a:iss:realsecure_network:7.0:xpu_20.15 cpe:/a:iss:realsecure_sentry:3.6ecf cpe:/a:iss:realsecure_server_sensor:7.0:xpu20.16 cpe:/h:iss:proventia_a_series_xpu:20.15 cpe:/h:iss:proventia_g_series_xpu:22.3 cpe:/h:iss:proventia_m_series_xpu:1.30

CVE-2004-0193

2004-03-15T00:00:00.000-05:00

2017-10-09T21:30:19.173-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040227 EEYE: RealSecure/BlackICE Server Message Block (SMB) Processing Overflow EEYE AD20040226 MISC http://www.eeye.com/html/Research/Upcoming/20040213.html CERT-VN VU#150326 BID 9752 ISS 20040226 Vulnerability in SMB Parsing in ISS Products XF pam-smb-protocol-bo(15207) Heap-based buffer overflow in the ISS Protocol Analysis Module (PAM), as used in certain versions of RealSecure Network 7.0 and Server Sensor 7.0, Proventia A, G, and M Series, RealSecure Desktop 7.0 and 3.6, RealSecure Guard 3.6, RealSecure Sentry 3.6, BlackICE PC Protection 3.6, and BlackICE Server Protection 3.6, allows remote attackers to execute arbitrary code via an SMB packet containing an authentication request with a long username.

cpe:/a:adobe:acrobat_reader:5.1

CVE-2004-0194

2004-03-29T00:00:00.000-05:00

2017-10-09T21:30:19.237-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20040303 Adobe Acrobat Reader XML Forms Data Format Buffer Overflow BUGTRAQ 20040303 Abobe Reader 5.1 XFDF Buffer Overflow Vulnerability MISC http://www.nextgenss.com/advisories/adobexfdf.txt BID 9802 XF acrobatreader-xfdf-bo(15384) Stack-based buffer overflow in the OutputDebugString function for Adobe Acrobat Reader 5.1 allows remote attackers to execute arbitrary code via a PDF document with XML Forms Data Format (XFDF) data.

cpe:/a:microsoft:jet:4.0

CVE-2004-0197

2004-06-01T00:00:00.000-04:00

2018-10-12T17:34:04.087-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CERT-VN VU#740716 BID 10112 CERT TA04-104A MS MS04-014 XF msjet-query-execute-code(15703) Buffer overflow in Microsoft Jet Database Engine 4.0 allows remote attackers to execute arbitrary code via a specially-crafted database query.

cpe:/o:microsoft:windows_2003_server:enterprise::64-bit cpe:/o:microsoft:windows_2003_server:enterprise_64-bit cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_2003_server:r2::64-bit cpe:/o:microsoft:windows_2003_server:r2::datacenter_64-bit cpe:/o:microsoft:windows_2003_server:standard::64-bit cpe:/o:microsoft:windows_2003_server:web cpe:/o:microsoft:windows_xp:::64-bit cpe:/o:microsoft:windows_xp:::home cpe:/o:microsoft:windows_xp::gold cpe:/o:microsoft:windows_xp::gold:professional cpe:/o:microsoft:windows_xp::sp1:64-bit cpe:/o:microsoft:windows_xp::sp1:home

CVE-2004-0199

2004-06-14T00:00:00.000-04:00

2018-10-12T17:34:04.697-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040512 MS04-015 - Windows Help Center - Dvdupgrade FULLDISC 20040512 MS04-015 - Windows Help Center - Dvdupgrade MISC http://www.exploitlabs.com/files/advisories/EXPL-A-2004-001-helpctr.txt CERT-VN VU#484814 BID 10321 MS MS04-015 XF win-hcp-code-execution(16095) Help and Support Center in Microsoft Windows XP and Windows Server 2003 SP1 does not properly validate HCP URLs, which allows remote attackers to execute arbitrary code, as demonstrated using certain hcp:// URLs that access the DVD Upgrade capability (dvdupgrd.htm).

cpe:/a:microsoft:.net_framework:1.0:sp2:sdk cpe:/a:microsoft:digital_image_pro:7.0 cpe:/a:microsoft:digital_image_pro:9 cpe:/a:microsoft:digital_image_suite:9 cpe:/a:microsoft:excel:2002 cpe:/a:microsoft:excel:2003 cpe:/a:microsoft:frontpage:2002 cpe:/a:microsoft:frontpage:2003 cpe:/a:microsoft:greetings:2002 cpe:/a:microsoft:infopath:2003 cpe:/a:microsoft:office:2003 cpe:/a:microsoft:office:xp:sp3 cpe:/a:microsoft:onenote:2003 cpe:/a:microsoft:outlook:2002 cpe:/a:microsoft:outlook:2003 cpe:/a:microsoft:picture_it:7.0 cpe:/a:microsoft:picture_it:9 cpe:/a:microsoft:picture_it:2002 cpe:/a:microsoft:powerpoint:2002 cpe:/a:microsoft:powerpoint:2003 cpe:/a:microsoft:producer::gold:office_powerpoints cpe:/a:microsoft:project:2002:sp1 cpe:/a:microsoft:project:2003 cpe:/a:microsoft:publisher:2002 cpe:/a:microsoft:publisher:2003 cpe:/a:microsoft:visio:2002:sp2 cpe:/a:microsoft:visio:2003 cpe:/a:microsoft:visual_basic:2002::.net_standard cpe:/a:microsoft:visual_basic:2003::.net_standard cpe:/a:microsoft:visual_c%23:2002::.net_standard cpe:/a:microsoft:visual_c%23:2003::.net_standard cpe:/a:microsoft:visual_c%2b%2b:2002::.net_standard cpe:/a:microsoft:visual_c%2b%2b:2003::.net_standard cpe:/a:microsoft:visual_j%23_.net:2003::.net_standard cpe:/a:microsoft:visual_studio_.net:2002:gold cpe:/a:microsoft:visual_studio_.net:2003:gold cpe:/a:microsoft:word:2002 cpe:/a:microsoft:word:2003 cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_xp:::64-bit cpe:/o:microsoft:windows_xp::gold cpe:/o:microsoft:windows_xp::sp1:64-bit cpe:/o:microsoft:windows_xp::sp1:tablet_pc

CVE-2004-0200

2004-09-28T00:00:00.000-04:00

2018-10-30T12:25:26.903-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040914 Microsoft GDIPlus.DLL JPEG Parsing Engine Buffer Overflow CERT-VN VU#297462 CERT TA04-260A MS MS04-028 XF win-jpeg-bo(16304) Buffer overflow in the JPEG (JPG) parsing engine in the Microsoft Graphic Device Interface Plus (GDI+) component, GDIPlus.dll, allows remote attackers to execute arbitrary code via a JPEG image with a small JPEG COM field length that is normalized to a large integer length before a memory copy operation.

cpe:/a:avaya:ip600_media_servers cpe:/h:avaya:definity_one_media_server cpe:/h:avaya:s8100 cpe:/o:avaya:modular_messaging_message_storage_server:s3400 cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2000::sp1 cpe:/o:microsoft:windows_2000::sp2 cpe:/o:microsoft:windows_2000::sp3 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server:enterprise::64-bit cpe:/o:microsoft:windows_2003_server:enterprise_64-bit cpe:/o:microsoft:windows_2003_server:r2::64-bit cpe:/o:microsoft:windows_2003_server:r2::datacenter_64-bit cpe:/o:microsoft:windows_2003_server:standard::64-bit cpe:/o:microsoft:windows_2003_server:web cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_98se cpe:/o:microsoft:windows_me cpe:/o:microsoft:windows_nt:4.0::enterprise_server cpe:/o:microsoft:windows_nt:4.0::server cpe:/o:microsoft:windows_nt:4.0::terminal_server cpe:/o:microsoft:windows_nt:4.0::workstation cpe:/o:microsoft:windows_nt:4.0:sp1:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp1:server cpe:/o:microsoft:windows_nt:4.0:sp1:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp1:workstation cpe:/o:microsoft:windows_nt:4.0:sp2:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp2:server cpe:/o:microsoft:windows_nt:4.0:sp2:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp2:workstation cpe:/o:microsoft:windows_nt:4.0:sp3:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp3:server cpe:/o:microsoft:windows_nt:4.0:sp3:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp3:workstation cpe:/o:microsoft:windows_nt:4.0:sp4:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp4:server cpe:/o:microsoft:windows_nt:4.0:sp4:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp4:workstation cpe:/o:microsoft:windows_nt:4.0:sp5:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp5:server cpe:/o:microsoft:windows_nt:4.0:sp5:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp5:workstation cpe:/o:microsoft:windows_nt:4.0:sp6:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp6:server cpe:/o:microsoft:windows_nt:4.0:sp6:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp6:workstation cpe:/o:microsoft:windows_nt:4.0:sp6a:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp6a:server cpe:/o:microsoft:windows_nt:4.0:sp6a:workstation cpe:/o:microsoft:windows_xp:::64-bit cpe:/o:microsoft:windows_xp:::home cpe:/o:microsoft:windows_xp::gold:professional cpe:/o:microsoft:windows_xp::sp1:64-bit cpe:/o:microsoft:windows_xp::sp1:home

CVE-2004-0201

2004-08-06T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20040714 HtmlHelp - .CHM File Heap Overflow CERT-VN VU#920060 CERT TA04-196A MS MS04-023 XF win-htmlhelp-execute-code(16586) Heap-based buffer overflow in the HtmlHelp program (hh.exe) in HTML Help for Microsoft Windows 98, Me, NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary commands via a .CHM file with a large length field, a different vulnerability than CVE-2003-1041.

cpe:/a:microsoft:directx:7.0 cpe:/a:microsoft:directx:7.0a cpe:/a:microsoft:directx:7.1 cpe:/a:microsoft:directx:8.0 cpe:/a:microsoft:directx:8.0a cpe:/a:microsoft:directx:8.1 cpe:/a:microsoft:directx:8.1a cpe:/a:microsoft:directx:8.1b cpe:/a:microsoft:directx:8.2 cpe:/a:microsoft:directx:9.0a cpe:/a:microsoft:directx:9.0b cpe:/o:microsoft:windows_2000::sp2 cpe:/o:microsoft:windows_2000::sp3 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server:enterprise::64-bit cpe:/o:microsoft:windows_2003_server:enterprise_64-bit cpe:/o:microsoft:windows_2003_server:r2::64-bit cpe:/o:microsoft:windows_2003_server:r2::datacenter_64-bit cpe:/o:microsoft:windows_2003_server:standard::64-bit cpe:/o:microsoft:windows_2003_server:web cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_98se cpe:/o:microsoft:windows_me cpe:/o:microsoft:windows_xp:::64-bit cpe:/o:microsoft:windows_xp:::home cpe:/o:microsoft:windows_xp::gold:professional cpe:/o:microsoft:windows_xp::sp1:64-bit cpe:/o:microsoft:windows_xp::sp1:home

CVE-2004-0202

2004-08-06T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BID 10487 MS MS04-016 XF ms-directx-directplay-dos(16306) IDirectPlay4 Application Programming Interface (API) of Microsoft DirectPlay 7.0a thru 9.0b, as used in Windows Server 2003 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed packet.

cpe:/a:microsoft:exchange_server:5.5 cpe:/a:microsoft:exchange_server:5.5:sp1 cpe:/a:microsoft:exchange_server:5.5:sp2 cpe:/a:microsoft:exchange_server:5.5:sp3 cpe:/a:microsoft:exchange_server:5.5:sp4

CVE-2004-0203

2004-11-23T00:00:00.000-05:00

2018-10-12T17:34:11.540-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CERT-VN VU#948750 MS MS04-026 XF exchange-owa-execute-code(16583) Cross-site scripting (XSS) vulnerability in Outlook Web Access for Exchange Server 5.5 Service Pack 4 allows remote attackers to insert arbitrary script and spoof content in HTML email or web caches via an HTML redirect query.

cpe:/a:bea:weblogic_server:8.1 cpe:/a:bea:weblogic_server:8.1::express cpe:/a:bea:weblogic_server:8.1::win32 cpe:/a:bea:weblogic_server:8.1:sp1 cpe:/a:bea:weblogic_server:8.1:sp1:express cpe:/a:bea:weblogic_server:8.1:sp1:win32 cpe:/a:bea:weblogic_server:8.1:sp2 cpe:/a:bea:weblogic_server:8.1:sp2:express cpe:/a:bea:weblogic_server:8.1:sp2:win32 cpe:/a:borland_software:j_builder cpe:/a:businessobjects:crystal_enterprise:9 cpe:/a:businessobjects:crystal_enterprise:10 cpe:/a:businessobjects:crystal_enterprise_java_sdk:8.5 cpe:/a:businessobjects:crystal_enterprise_ras:8.5::unix cpe:/a:businessobjects:crystal_reports:9 cpe:/a:businessobjects:crystal_reports:10 cpe:/a:microsoft:business_solutions_crm:1.2 cpe:/a:microsoft:outlook:2003::business_contact_manager cpe:/a:microsoft:visual_studio_.net:2003:gold

CVE-2004-0204

2004-08-06T00:00:00.000-04:00

2018-10-12T17:34:11.997-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040502 Crystal Reports Vulnerabilities BUGTRAQ 20040608 Vulnerability: Arbitrary File Access & DoS in Crystal Reports CONFIRM http://support.businessobjects.com/fix/hot/critical/bulletins/security_bulletin_june04.asp BID 10260 MS MS04-017 XF crystalreports-file-deletion(16044) Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to read and delete arbitrary files via ".." sequences in the dynamicimag argument to crystalimagehandler.aspx.

cpe:/a:avaya:ip600_media_servers cpe:/a:microsoft:internet_information_server:4.0 cpe:/h:avaya:definity_one_media_server cpe:/h:avaya:s8100 cpe:/o:avaya:modular_messaging_message_storage_server:s3400

CVE-2004-0205

2004-08-06T00:00:00.000-04:00

2018-10-12T17:34:13.043-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CIAC O-179 CERT-VN VU#717748 BID 10706 CERT TA04-196A MS MS04-021 XF iis-redirect-bo(16578) Buffer overflow in Microsoft Internet Information Server (IIS) 4.0 allows local users to execute arbitrary code via the redirect function.

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_xp::gold

CVE-2004-0206

2004-11-03T00:00:00.000-05:00

2018-10-12T17:34:13.933-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20041013 Microsoft Windows NetDDE Service Buffer Overflow CERT-VN VU#640488 BID 11372 MS MS04-031 XF win-netdde-bo(16556) XF win-ms04031-patch(17657) Network Dynamic Data Exchange (NetDDE) services for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows attackers to remotely execute arbitrary code or locally gain privileges via a malicious message or application that involves an "unchecked buffer," possibly a buffer overflow.

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_xp::gold

CVE-2004-0207

2004-11-03T00:00:00.000-05:00

2018-10-12T17:34:15.933-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20041013 SetWindowLong Shatter Attacks CERT-VN VU#218526 MS MS04-032 XF win-mngmt-api-gain-privileges(16579) XF win-ms04032-patch(17658) "Shatter" style vulnerability in the Window Management application programming interface (API) for Microsoft Windows 98, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to gain privileges by using certain API functions to change properties of privileged programs using the SetWindowLong and SetWIndowLongPtr API functions.

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_xp::gold

CVE-2004-0208

2004-11-03T00:00:00.000-05:00

2018-10-12T17:34:16.527-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20041013 EEYE: Windows VDM #UD Local Privilege Escalation CERT-VN VU#910998 MS MS04-032 XF win-vdm-gain-privilege(16580) XF win-ms04032-patch(17658) The Virtual DOS Machine (VDM) subsystem of Microsoft Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows local users to access kernel memory and gain privileges via a malicious program that modified some system structures in a way that is not properly validated by privileged operating system functions.

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_xp::gold

CVE-2004-0209

2004-11-03T00:00:00.000-05:00

2018-10-12T17:34:17.900-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20041019 [EXPL] (MS04-032) Microsoft Windows XP Metafile (.emf) Heap Overflow CERT-VN VU#806278 BID 11375 MS MS04-032 XF win-emf-bo(16581) XF win-ms04032-patch(17658) Unknown vulnerability in the Graphics Rendering Engine processes of Microsoft Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code via (1) Windows Metafile (WMF) or (2) Enhanced Metafile (EMF) image formats that involve "an unchecked buffer."

cpe:/o:avaya:modular_messaging_message_storage_server:s3400 cpe:/o:microsoft:windows_2000::sp2 cpe:/o:microsoft:windows_2000::sp3 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_nt:4.0:sp6:alpha cpe:/o:microsoft:windows_nt:4.0:sp6:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp6a:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp6a:server cpe:/o:microsoft:windows_nt:4.0:sp6a:workstation

CVE-2004-0210

2004-08-06T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CERT-VN VU#647436 CERT TA04-196A MS MS04-020 XF win-posix-bo(16590) The POSIX component of Microsoft Windows NT and Windows 2000 allows local users to execute arbitrary code via certain parameters, possibly by modifying message length values and causing a buffer overflow.

cpe:/o:microsoft:windows_2003_server:r2

CVE-2004-0211

2004-11-03T00:00:00.000-05:00

2018-10-12T17:34:19.713-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CERT-VN VU#119262 MS MS04-032 XF win2k3-kernel-cpu-dos(16582) XF win-ms04032-patch(17658) The kernel for Microsoft Windows Server 2003 does not reset certain values in CPU data structures, which allows local users to cause a denial of service (system crash) via a malicious program.

cpe:/a:avaya:ip600_media_servers cpe:/a:microsoft:ie:6.0:sp1 cpe:/h:avaya:definity_one_media_server cpe:/h:avaya:s8100 cpe:/o:avaya:modular_messaging_message_storage_server:s3400 cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2000::sp1 cpe:/o:microsoft:windows_2000::sp2 cpe:/o:microsoft:windows_2000::sp3 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_nt:4.0:sp6a:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp6a:server cpe:/o:microsoft:windows_nt:4.0:sp6a:workstation cpe:/o:microsoft:windows_xp:::64-bit cpe:/o:microsoft:windows_xp:::home cpe:/o:microsoft:windows_xp::gold:professional cpe:/o:microsoft:windows_xp::sp1:64-bit cpe:/o:microsoft:windows_xp::sp1:home

CVE-2004-0212

2004-08-06T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040714 Microsoft Windows Task Scheduler '.job' Stack Overflow BUGTRAQ 20040714 Unchecked buffer in mstask.dll CERT-VN VU#228028 MISC http://www.ngssoftware.com/advisories/mstaskjob.txt CERT TA04-196A MS MS04-022 XF win-taskscheduler-bo(16591) Stack-based buffer overflow in the Task Scheduler for Windows 2000 and XP, and Internet Explorer 6 on Windows NT 4.0, allows local or remote attackers to execute arbitrary code via a .job file containing long parameters, as demonstrated using Internet Explorer and accessing a .job file on an anonymous share.

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2000::sp1 cpe:/o:microsoft:windows_2000::sp2 cpe:/o:microsoft:windows_2000::sp3 cpe:/o:microsoft:windows_2000::sp4

CVE-2004-0213

2004-08-06T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040713 Microsoft Window Utility Manager Local Elevation of Privileges CERT-VN VU#868580 CERT TA04-196A MS MS04-019 XF win-utilitymanager-gain-privileges(16592) Utility Manager in Windows 2000 launches winhlp32.exe while Utility Manager is running with raised privileges, which allows local users to gain system privileges via a "Shatter" style attack that sends a Windows message to cause Utility Manager to launch winhlp32 by directly accessing the context sensitive help and bypassing the GUI, then sending another message to winhlp32 in order to open a user-selected file, a different vulnerability than CVE-2003-0908.

cpe:/a:microsoft:ie:6.0.2900 cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_me cpe:/o:microsoft:windows_xp::sp1:tablet_pc

CVE-2004-0214

2004-11-03T00:00:00.000-05:00

2018-10-12T17:34:22.667-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040425 Microsoft's Explorer and Internet Explorer long share name buffer overflow. FULLDISC 20040425 Microsoft's Explorer and Internet Explorer long share name buffer overflow. SECTRACK 1011647 MSKB 322857 CERT-VN VU#616200 MISC http://www.securiteam.com/windowsntfocus/5JP0M1PCKI.html BID 10213 MS MS04-037 XF win-long-fileshare-bo(15956) XF win-ms04037-patch(17662) Buffer overflow in Microsoft Internet Explorer and Explorer on Windows XP SP1, WIndows 2000, Windows 98, and Windows Me may allow remote malicious servers to cause a denial of service (application crash) and possibly execute arbitrary code via long share names, as demonstrated using Samba.

cpe:/a:avaya:ip600_media_servers cpe:/a:microsoft:outlook_express:6.0 cpe:/h:avaya:definity_one_media_server cpe:/h:avaya:s8100 cpe:/o:avaya:modular_messaging_message_storage_server:s3400

CVE-2004-0215

2004-08-06T00:00:00.000-04:00

2018-10-12T17:34:24.857-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CERT-VN VU#869640 CERT TA04-196A MS MS04-018 XF outlook-malformed-email-header-dos(16585) Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e-mail header.

cpe:/a:microsoft:ie:5.01 cpe:/a:microsoft:ie:5.5 cpe:/a:microsoft:ie:6:windows_server_2003_sp1

CVE-2004-0216

2004-11-03T00:00:00.000-05:00

2018-10-12T17:34:25.887-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20041012 Microsoft Internet Explorer Install Engine Control Buffer Overflow BUGTRAQ 20050119 Microsoft Internet Explorer Install Engine Control Buffer Overflow (#NISR19012005a) NTBUGTRAQ 20050119 Microsoft Internet Explorer Install Engine Control Buffer Overflow (#NISR19012005a) CERT-VN VU#637760 MISC http://www.ngssoftware.com/advisories/msinsengfull.txt CERT TA04-293A MS MS04-038 XF ie-installenginectl-setciffile-bo(17620) XF ie-ms04038-patch(17651) Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious website or HTML email with a long .CAB file name, which triggers the integer overflow when calculating a buffer length and leads to a heap-based buffer overflow.

cpe:/a:symantec:antivirus_scan_engine:4.0::red_hat_linux cpe:/a:symantec:antivirus_scan_engine:4.3::red_hat_linux

CVE-2004-0217

2004-04-15T00:00:00.000-04:00

2017-07-10T21:29:58.777-04:00

3.7

LOCAL

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040216 Possible race condition in Symantec AntiVirus Scan Engine for Red BID 9662 XF symantec-scanengine-race-condition(15215) The LiveUpdate capability (liveupdate.sh) in Symantec AntiVirus Scan Engine 4.0 and 4.3 for Red Hat Linux allows local users to create or append to arbitrary files via a symlink attack on /tmp/LiveUpdate.log.

cpe:/o:openbsd:openbsd:3.4

CVE-2004-0218

2004-05-04T00:00:00.000-04:00

2017-07-10T21:29:58.837-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040323 R7-0018: OpenBSD isakmpd payload handling denial-of-service vulnerabilities CERT-VN VU#349113 OPENBSD 20040317 015: RELIABILITY FIX: March 17, 2004 MISC http://www.rapid7.com/advisories/R7-0018.html BID 10028 SECTRACK 1009468 XF openbsd-isakmp-zerolength-dos(15518) isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (infinite loop) via an ISAKMP packet with a zero-length payload, as demonstrated by the Striker ISAKMP Protocol Test Suite.

cpe:/o:openbsd:openbsd:3.4

CVE-2004-0219

2004-05-04T00:00:00.000-04:00

2017-07-10T21:29:58.887-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040323 R7-0018: OpenBSD isakmpd payload handling denial-of-service vulnerabilities CERT-VN VU#785945 OPENBSD 20040317 015: RELIABILITY FIX: March 17, 2004 MISC http://www.rapid7.com/advisories/R7-0018.html BID 9907 SECTRACK 1009468 XF openbsd-isakmp-ipsec-dos(15628) isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a malformed IPSEC SA payload, as demonstrated by the Striker ISAKMP Protocol Test Suite.

cpe:/o:openbsd:openbsd:3.4

CVE-2004-0220

2004-05-04T00:00:00.000-04:00

2017-07-10T21:29:58.947-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov BUGTRAQ 20040323 R7-0018: OpenBSD isakmpd payload handling denial-of-service vulnerabilities CERT-VN VU#223273 OPENBSD 20040317 015: RELIABILITY FIX: March 17, 2004 MISC http://www.rapid7.com/advisories/R7-0018.html BID 9907 SECTRACK 1009468 XF openbsd-isakmp-integer-underflow(15629) isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service via an ISAKMP packet with a malformed Cert Request payload, which causes an integer underflow that is used in a malloc operation that is not properly handled, as demonstrated by the Striker ISAKMP Protocol Test Suite.

cpe:/o:openbsd:openbsd:3.4

CVE-2004-0221

2004-05-04T00:00:00.000-04:00

2017-07-10T21:29:59.010-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040323 R7-0018: OpenBSD isakmpd payload handling denial-of-service vulnerabilities CERT-VN VU#524497 OPENBSD 20040317 015: RELIABILITY FIX: March 17, 2004 MISC http://www.rapid7.com/advisories/R7-0018.html BID 9907 SECTRACK 1009468 XF openbsd-isakmp-delete-dos(15630) isakmpd in OpenBSD 3.4 and earlier allows remote attackers to cause a denial of service (crash) via an ISAKMP packet with a delete payload containing a large number of SPIs, which triggers an out-of-bounds read error, as demonstrated by the Striker ISAKMP Protocol Test Suite.

cpe:/o:openbsd:openbsd:3.4

CVE-2004-0222

2004-05-04T00:00:00.000-04:00

2017-07-10T21:29:59.057-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040323 R7-0018: OpenBSD isakmpd payload handling denial-of-service vulnerabilities CERT-VN VU#996177 OPENBSD 20040317 015: RELIABILITY FIX: March 17, 2004 MISC http://www.rapid7.com/advisories/R7-0018.html BID 10028 SECTRACK 1009468 XF openbsd-isakmp-memory-leak(15519) Multiple memory leaks in isakmpd in OpenBSD 3.4 and earlier allow remote attackers to cause a denial of service (memory exhaustion) via certain ISAKMP packets, as demonstrated by the Striker ISAKMP Protocol Test Suite.

cpe:/a:double_precision_incorporated:courier_mta:0.43 cpe:/a:double_precision_incorporated:courier_mta:0.43.1 cpe:/a:double_precision_incorporated:courier_mta:0.43.2 cpe:/a:double_precision_incorporated:courier_mta:0.44 cpe:/a:double_precision_incorporated:courier_mta:0.44.2 cpe:/a:double_precision_incorporated:sqwebmail:3.5.2 cpe:/a:double_precision_incorporated:sqwebmail:3.5.3 cpe:/a:double_precision_incorporated:sqwebmail:3.6.1 cpe:/a:double_precision_incorporated:sqwebmail:3.6.2 cpe:/a:double_precision_incorporated:sqwebmail:3.6_.0 cpe:/a:inter7:courier-imap:1.6 cpe:/a:inter7:courier-imap:1.7 cpe:/a:inter7:courier-imap:2.0.0 cpe:/a:inter7:courier-imap:2.1 cpe:/a:inter7:courier-imap:2.1.1 cpe:/a:inter7:courier-imap:2.1.2 cpe:/a:inter7:courier-imap:2.2.0 cpe:/a:inter7:courier-imap:2.2.1 cpe:/o:gentoo:linux:1.4 cpe:/o:gentoo:linux:1.4:rc1 cpe:/o:gentoo:linux:1.4:rc2 cpe:/o:gentoo:linux:1.4:rc3

CVE-2004-0224

2004-04-15T00:00:00.000-04:00

2017-07-10T21:29:59.120-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://sourceforge.net/project/shownotes.php?release_id=5767 BID 9845 XF courier-codeset-converter-bo(15434) Multiple buffer overflows in (1) iso2022jp.c or (2) shiftjis.c for Courier-IMAP before 3.0.0, Courier before 0.45, and SqWebMail before 4.0.0 may allow remote attackers to execute arbitrary code "when Unicode character is out of BMP range."

CVE-2004-0226

2004-08-18T00:00:00.000-04:00

2017-07-10T21:29:59.183-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

GENTOO GLSA-200405-21 DEBIAN DSA-497 MANDRAKE MDKSA-2004:039 SUSE SuSE-SA:2004:012 REDHAT RHSA-2004:172 XF midnight-commander-local-privileges(16016) Multiple buffer overflows in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.

cpe:/a:triornis:zoneminder:1.17.0 cpe:/a:triornis:zoneminder:1.17.1 cpe:/a:triornis:zoneminder:1.17.2 cpe:/a:triornis:zoneminder:1.18.0 cpe:/a:triornis:zoneminder:1.18.1 cpe:/a:triornis:zoneminder:1.19.0 cpe:/a:triornis:zoneminder:1.19.1

CVE-2004-0227

2004-06-14T00:00:00.000-04:00

2017-07-10T21:29:59.243-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 10340 CONFIRM http://www.zoneminder.com/index.php?id=20&type=0&backPID=20&tt_news=29 XF zoneminder-zms-bo(16136) Buffer overflow in the zms script in ZoneMinder before 1.19.2 may allow a remote attacker to execute arbitrary code via a long query string.

cpe:/o:linux:linux_kernel:2.6.0

CVE-2004-0228

2004-08-18T00:00:00.000-04:00

2017-07-10T21:29:59.307-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONECTIVA CLA-2004:852 FEDORA FEDORA-2004-111 GENTOO GLSA-200407-02 MANDRAKE MDKSA-2004:050 SUSE SuSE-SA:2004:010 XF linux-cpufreq-info-disclosure(15951) Integer signedness error in the cpufreq proc handler (cpufreq_procctl) in Linux kernel 2.6 allows local users to gain privileges.

cpe:/o:gentoo:linux:1.4 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.21:pre1 cpe:/o:linux:linux_kernel:2.4.21:pre4 cpe:/o:linux:linux_kernel:2.4.21:pre7 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.23:pre9 cpe:/o:linux:linux_kernel:2.4.23_ow2 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.24_ow1 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.4.26 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.0:test1 cpe:/o:linux:linux_kernel:2.6.0:test10 cpe:/o:linux:linux_kernel:2.6.0:test11 cpe:/o:linux:linux_kernel:2.6.0:test2 cpe:/o:linux:linux_kernel:2.6.0:test3 cpe:/o:linux:linux_kernel:2.6.0:test4 cpe:/o:linux:linux_kernel:2.6.0:test5 cpe:/o:linux:linux_kernel:2.6.0:test6 cpe:/o:linux:linux_kernel:2.6.0:test7 cpe:/o:linux:linux_kernel:2.6.0:test8 cpe:/o:linux:linux_kernel:2.6.0:test9 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6_test9_cvs

CVE-2004-0229

2004-08-18T00:00:00.000-04:00

2017-07-10T21:29:59.370-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONECTIVA CLA-2004:852 GENTOO GLSA-200407-02 MANDRAKE MDKSA-2004:037 SUSE SuSE-SA:2004:010 BID 10211 XF linux-framebuffer(15974) The framebuffer driver in Linux kernel 2.6.x does not properly use the fb_copy_cmap function, with unknown impact.

cpe:/a:mcafee:network_data_loss_prevention:8.6 cpe:/a:mcafee:network_data_loss_prevention:9.2.0 cpe:/a:mcafee:network_data_loss_prevention:9.2.1 cpe:/a:mcafee:network_data_loss_prevention:9.2.2 cpe:/a:openpgp:openpgp:2.6.2 cpe:/o:juniper:junos cpe:/o:netbsd:netbsd:1.5 cpe:/o:netbsd:netbsd:1.5.1 cpe:/o:netbsd:netbsd:1.5.2 cpe:/o:netbsd:netbsd:1.5.3 cpe:/o:netbsd:netbsd:1.6 cpe:/o:netbsd:netbsd:1.6.1 cpe:/o:netbsd:netbsd:1.6.2 cpe:/o:netbsd:netbsd:2.0 cpe:/o:oracle:solaris:10 cpe:/o:oracle:solaris:11 cpe:/o:xinuos:openserver:5.0.6 cpe:/o:xinuos:openserver:5.0.7 cpe:/o:xinuos:unixware:7.1.1 cpe:/o:xinuos:unixware:7.1.3

CVE-2004-0230

2004-08-18T00:00:00.000-04:00

2018-10-19T11:30:05.173-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov NETBSD NetBSD-SA2004-006 SCO SCOSA-2005.3 SCO SCOSA-2005.9 SCO SCOSA-2005.14 SGI 20040403-01-A CONFIRM http://kb.juniper.net/JSA10638 BUGTRAQ 20040425 Perl code exploting TCP not checking RST ACK. HP SSRT4696 CISCO 20040420 TCP Vulnerabilities in Multiple IOS-Based Cisco Products CERT-VN VU#415294 CONFIRM http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html HP SSRT061264 BID 10183 MISC http://www.uniras.gov.uk/vuls/2004/236929/index.htm CERT TA04-111A VUPEN ADV-2006-3983 MS MS05-019 MS MS06-064 XF tcp-rst-dos(15886) CONFIRM https://kc.mcafee.com/corporate/index?page=content&id=SB10053 TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.

CVE-2004-0231

2004-08-18T00:00:00.000-04:00

2017-07-10T21:29:59.527-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov GENTOO GLSA-200405-21 DEBIAN DSA-497 MANDRAKE MDKSA-2004:039 SUSE SuSE-SA:2004:012 REDHAT RHSA-2004:172 XF midnight-commander-insecure-files(16020) Multiple vulnerabilities in Midnight Commander (mc) before 4.6.0, with unknown impact, related to "Insecure temporary file and directory creations."

CVE-2004-0232

2004-08-18T00:00:00.000-04:00

2017-07-10T21:29:59.587-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov GENTOO GLSA-200405-21 DEBIAN DSA-497 MANDRAKE MDKSA-2004:039 SUSE SuSE-SA:2004:012 REDHAT RHSA-2004:172 XF midnight-commander-format-string(16021) Multiple format string vulnerabilities in Midnight Commander (mc) before 4.6.0 may allow attackers to cause a denial of service or execute arbitrary code.

cpe:/a:sgi:propack:2.4 cpe:/a:sgi:propack:3.0 cpe:/a:utempter:utempter:0.5.2 cpe:/a:utempter:utempter:0.5.3 cpe:/o:slackware:slackware_linux cpe:/o:slackware:slackware_linux:9.1

CVE-2004-0233

2004-08-18T00:00:00.000-04:00

2017-10-10T21:29:24.637-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov GENTOO GLSA-200405-05 SUNALERT 1000752 MANDRAKE MDKSA-2004:031 REDHAT RHSA-2004:174 REDHAT RHSA-2004:175 BID 10178 SLACKWARE SSA:2004-110 XF utemper-symlink(15904) Utempter allows device names that contain .. (dot dot) directory traversal sequences, which allows local users to overwrite arbitrary files via a symlink attack on device names in combination with an application that trusts the utmp or wtmp files.

cpe:/a:clearswift:mailsweeper:4.0 cpe:/a:clearswift:mailsweeper:4.1 cpe:/a:clearswift:mailsweeper:4.2 cpe:/a:clearswift:mailsweeper:4.3 cpe:/a:clearswift:mailsweeper:4.3.3 cpe:/a:clearswift:mailsweeper:4.3.4 cpe:/a:clearswift:mailsweeper:4.3.5 cpe:/a:clearswift:mailsweeper:4.3.6 cpe:/a:clearswift:mailsweeper:4.3.6_sp1 cpe:/a:clearswift:mailsweeper:4.3.7 cpe:/a:clearswift:mailsweeper:4.3.8 cpe:/a:clearswift:mailsweeper:4.3.10 cpe:/a:clearswift:mailsweeper:4.3.11 cpe:/a:clearswift:mailsweeper:4.3.13 cpe:/a:f-secure:f-secure_anti-virus:4.51::linux_gateways cpe:/a:f-secure:f-secure_anti-virus:4.51::linux_servers cpe:/a:f-secure:f-secure_anti-virus:4.51::linux_workstations cpe:/a:f-secure:f-secure_anti-virus:4.52::linux_gateways cpe:/a:f-secure:f-secure_anti-virus:4.52::linux_servers cpe:/a:f-secure:f-secure_anti-virus:4.52::linux_workstations cpe:/a:f-secure:f-secure_anti-virus:4.60::samba_servers cpe:/a:f-secure:f-secure_anti-virus:5.5::client_security cpe:/a:f-secure:f-secure_anti-virus:5.41::mimesweeper cpe:/a:f-secure:f-secure_anti-virus:5.41::windows_servers cpe:/a:f-secure:f-secure_anti-virus:5.41::workstations cpe:/a:f-secure:f-secure_anti-virus:5.42::mimesweeper cpe:/a:f-secure:f-secure_anti-virus:5.42::windows_servers cpe:/a:f-secure:f-secure_anti-virus:5.42::workstations cpe:/a:f-secure:f-secure_anti-virus:5.52::client_security cpe:/a:f-secure:f-secure_anti-virus:6.21::ms_exchange cpe:/a:f-secure:f-secure_anti-virus:2003 cpe:/a:f-secure:f-secure_anti-virus:2004 cpe:/a:f-secure:f-secure_for_firewalls:6.20 cpe:/a:f-secure:f-secure_internet_security:2003 cpe:/a:f-secure:f-secure_internet_security:2004 cpe:/a:f-secure:f-secure_personal_express:4.5 cpe:/a:f-secure:f-secure_personal_express:4.6 cpe:/a:f-secure:f-secure_personal_express:4.7 cpe:/a:f-secure:internet_gatekeeper:6.31 cpe:/a:f-secure:internet_gatekeeper:6.32 cpe:/a:rarlab:winrar:3.20 cpe:/a:redhat:lha:1.14i-9::i386 cpe:/a:sgi:propack:2.4 cpe:/a:sgi:propack:3.0 cpe:/a:stalker:cgpmcafee:3.2 cpe:/a:tsugio_okamoto:lha:1.14 cpe:/a:tsugio_okamoto:lha:1.15 cpe:/a:tsugio_okamoto:lha:1.17 cpe:/a:winzip:winzip:9.0 cpe:/o:redhat:fedora_core:core_1.0

CVE-2004-0234

2004-08-18T00:00:00.000-04:00

2017-10-10T21:29:24.730-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20060403 Barracuda LHA archiver security bug leads to remote compromise CONECTIVA CLA-2004:840 FULLDISC 20040501 LHa buffer overflows and directory traversal problems FULLDISC 20040502 Lha local stack overflow Proof Of Concept Code BUGTRAQ 20040510 [Ulf Harnhammar]: LHA Advisory + Patch GENTOO GLSA-200405-02 SECTRACK 1015866 DEBIAN DSA-515 MISC http://www.guay-leroux.com/projects/barracuda-advisory-LHA.txt FEDORA FEDORA-2004-119 REDHAT RHSA-2004:178 REDHAT RHSA-2004:179 BID 10243 VUPEN ADV-2006-1220 FEDORA FLSA:1833 XF lha-multiple-bo(16012) Multiple stack-based buffer overflows in the get_header function in header.c for LHA 1.14, as used in products such as Barracuda Spam Firewall, allow remote attackers or local users to execute arbitrary code via long directory or file names in an LHA archive, which triggers the overflow when testing or extracting the archive.

CVE-2004-0235

2004-08-18T00:00:00.000-04:00

2017-10-10T21:29:24.810-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONECTIVA CLA-2004:840 FULLDISC 20040501 LHa buffer overflows and directory traversal problems BUGTRAQ 20040510 [Ulf Harnhammar]: LHA Advisory + Patch GENTOO GLSA-200405-02 DEBIAN DSA-515 FEDORA FEDORA-2004-119 REDHAT RHSA-2004:178 REDHAT RHSA-2004:179 BID 10243 FEDORA FLSA:1833 XF lha-directory-traversal(16013) Multiple directory traversal vulnerabilities in LHA 1.14 allow remote attackers or local users to create arbitrary files via an LHA archive containing filenames with (1) .. sequences or (2) absolute pathnames with double leading slashes ("//absolute/path").

cpe:/a:steelid:thephototool

CVE-2004-0236

2004-11-23T00:00:00.000-05:00

2017-07-10T21:29:59.887-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040131 Advisory ! SECTRACK 1008906 BID 9884 XF thephototool-login-sql-injection(15007) SQL injection vulnerability in login.asp in thePHOTOtool allows remote attackers to gain unauthorized access via the password field.

CVE-2004-0237

2004-11-23T00:00:00.000-05:00

2017-07-10T21:29:59.933-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040131 Directory Traversal in Aprox PHP Portal. SECTRACK 1008915 BID 9540 XF aproxphpportal-index-directory-traversal(15014) Directory traversal vulnerability in index.php in Aprox PHP Portal allows remote attackers to read arbitrary files via a full pathname in the show parameter.

cpe:/a:0verkill:0verkill:0.16

CVE-2004-0238

2004-11-23T00:00:00.000-05:00

2017-07-10T21:29:59.993-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20040202 0verkill - little simple vulnerability. BUGTRAQ 20040202 0verkill - little simple vulnerability. MISC http://www.securiteam.com/securitynews/5AP010KC0C.html BID 9550 XF overkill-client-multiple-bo(14999) XF overkill-server-parsecommandline-bo(15000) Multiple buffer overflows in Overkill (0verkill) 0.15pre3 might allow local users to execute arbitrary code in the client via a long HOME environment variable in the (1) load_cfg and (2) save_cfg functions; possibly allow remote attackers to execute arbitrary code via long strings to (3) the send_message function; and, in the server, via (4) the parse_command_line function.

cpe:/a:photopost:photopost_php_pro:3.1 cpe:/a:photopost:photopost_php_pro:3.2 cpe:/a:photopost:photopost_php_pro:3.3 cpe:/a:photopost:photopost_php_pro:4.0 cpe:/a:photopost:photopost_php_pro:4.1 cpe:/a:photopost:photopost_php_pro:4.6

CVE-2004-0239

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:00.057-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040202 ZH2004-03SA (security advisory): Photopost PHP Pro 4.6 Sql MISC http://www.securiteam.com/securitynews/5KP010UC0W.html BID 9557 XF photopostphp-sql-injection(15008) SQL injection vulnerability in showphoto.php in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain unauthorized access via the photo variable.

cpe:/a:qualiteam:x-cart:3.2.0 cpe:/a:qualiteam:x-cart:3.2.1 cpe:/a:qualiteam:x-cart:3.3.0 cpe:/a:qualiteam:x-cart:3.3.2 cpe:/a:qualiteam:x-cart:3.4.0 cpe:/a:qualiteam:x-cart:3.4.3 cpe:/a:qualiteam:x-cart:3.4.11

CVE-2004-0240

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:00.137-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040203 X-Cart vulnerability XF xcart-dotdot-directory-traversal(15033) Directory traversal vulnerability in X-Cart 3.4.3 allows remote attackers to view arbitrary files via a .. (dot dot) in the shop_closed_file argument to auth.php.

CVE-2004-0241

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:00.197-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040203 X-Cart vulnerability BID 9560 XF xcart-perlbinary-execute-commands(15034) X-Cart 3.4.3 allows remote attackers to execute arbitrary commands via the perl_binary argument in (1) upgrade.php or (2) general.php.

CVE-2004-0242

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:00.277-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040203 X-Cart vulnerability BID 9563 XF xcart-generalphp-obtain-information(15036) X-Cart 3.4.3 allows remote attackers to gain sensitive information via a mode parameter with (1) phpinfo command or (2) perlinfo command.

cpe:/o:ibm:aix

CVE-2004-0243

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:00.337-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040206 AIX password enumeration possible BUGTRAQ 20040203 Re: sqwebmail web login XF aix-password-enumeration(15172) AIX 4.3.3 through AIX 5.1, when direct remote login is disabled, displays a different message if the password is correct, which allows remote attackers to guess the password via brute force methods.

cpe:/o:cisco:ios:12.1e cpe:/o:cisco:ios:12.2sy cpe:/o:cisco:ios:12.2za

CVE-2004-0244

2004-11-23T00:00:00.000-05:00

2017-10-10T21:29:24.870-04:00

4.7

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov CISCO 20040203 Cisco 6000/6500/7600 Crafted Layer 2 Frame Vulnerability CERT-VN VU#810062 BID 9562 XF cisco-malformed-frame-dos(15013) Cisco 6000, 6500, and 7600 series systems with Multilayer Switch Feature Card 2 (MSFC2) and a FlexWAN or OSM module allow local users to cause a denial of service (hang or reset) by sending a layer 2 frame packet that encapsulates a layer 3 packet, but has inconsistent length values with that packet.

cpe:/a:web_crossing_inc:web_crossing:4.0 cpe:/a:web_crossing_inc:web_crossing:5.0

CVE-2004-0245

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:00.447-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040203 Web Crossing 4.x/5.x Denial of Service Vulnerability BID 9576 XF webcrossing-contentlength-post-dos(15022) Web Crossing 4.x and 5.x allows remote attackers to cause a denial of service (crash) by sending a HTTP POST request with a large or negative Content-Length, which causes an integer divide-by-zero.

cpe:/a:laurent_adda:les_commentaires:2.0

CVE-2004-0246

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:00.510-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040203 Les Commentaires (PHP) Include file BID 9536 XF lescommentaires-multiple-file-include(15010) Multiple PHP remote file inclusion vulnerabilities in (1) fonctions.lib.php, (2) derniers_commentaires.php, and (3) admin.php in Les Commentaires 2.0 allow remote attackers to execute arbitrary PHP code via the rep parameter.

cpe:/a:cauldron:chaser_client:1.5 cpe:/a:cauldron:chaser_server:1.4.9 cpe:/a:cauldron:chaser_server:1.5

CVE-2004-0247

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:00.557-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040203 Remote crash of Chaser game <= 1.50 BID 9567 XF chaser-memory-dos(15031) The client and server of Chaser 1.50 and earlier allow remote attackers to cause a denial of service (crash via exception) via a UDP packet with a length field that is greater than the actual data length, which causes Chaser to read unexpected memory.

cpe:/a:phpx:phpx:3.2.3

CVE-2004-0248

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:00.620-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040203 Multiple Vulnerabilities in PHPX BID 9569 XF phpx-subject-html-injection(15050) XF phpx-main-help-xss(15051) Cross-site scripting vulnerability (XSS) in PHPX 3.2.3 allows remote attackers to execute arbitrary script as other users by injecting arbitrary HTML or script into (1) keywords argument of main.inc.php, (2) body argument of help.inc.php, or (3) the subject field in Personal Messages and Forum.

cpe:/a:phpx:phpx:3.2.3

CVE-2004-0249

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:00.683-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040316 PHPX 2.x - 3.2.4 BUGTRAQ 20040203 Multiple Vulnerabilities in PHPX BID 9569 XF phpx-cookie-account-hijacking(15052) XF phpx-session-hijack(15512) PHPX 2.0 through 3.2.4 allows remote attackers to gain access to other accounts by modifying the cookie's PXL variable to reference another userID.

CVE-2004-0250

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:00.730-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040204 ZH2004-04SA (security advisory): Multiple Sql Injection BID 9557 MISC http://www.zone-h.org/en/advisories/read/id=3864/ XF photopostphp-sql-injection(15008) SQL injection vulnerability in PhotoPost PHP Pro 4.6 and earlier allows remote attackers to gain privileges via (1) the product parameter in showproduct.php or (2) the cat parameter in showcat.php.

cpe:/a:rxgoogle.cgi:rxgoogle.cgi:1.0

CVE-2004-0251

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:00.777-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040204 rxgoogle.cgi XSS Vulnerability. BID 9575 XF rxgoogle-query-xss(15043) Cross-site scripting (XSS) vulnerability in rxgoogle.cgi allows remote attackers to execute arbitrary script as other users via the query parameter.

cpe:/a:typsoft:typsoft_ftp_server:1.1

CVE-2004-0252

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:00.823-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040204 TYPSoft FTP Server 1.10 may be crashed BID 9573 SECTRACK 1008943 XF typsoft-empty-username-dos(15048) TYPSoft FTP Server 1.10 allows remote attackers to cause a denial of service (CPU consumption) via an empty USER name.

cpe:/a:ibm:cloudscape:5.1

CVE-2004-0253

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:00.870-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040205 IBM cloudscape SQL Database (DB2J) vulnerable to remote command BID 9583 XF cloudscape-sql-injection(15067) IBM Cloudscape 5.1 running jdk 1.4.2_03 allows remote attackers to execute arbitrary programs or cause a denial of service via certain SQL code, possibly due to a SQL injection vulnerability.

cpe:/a:crosscom_olicom:discuz:2.0 cpe:/a:crosscom_olicom:discuz:3.0

CVE-2004-0254

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:00.933-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040205 Possible Cross Site Scripting in Discuz! Board BID 9584 XF discuzboard-image-tag-xss(15066) Cross-site scripting (XSS) vulnerability in Discuz! Board 2.x and 3.x allows remote attackers to execute arbitrary script as other users via an img tag.

cpe:/a:xlight_ftp_server:xlight_ftp_server:1.25 cpe:/a:xlight_ftp_server:xlight_ftp_server:1.41 cpe:/a:xlight_ftp_server:xlight_ftp_server:1.45 cpe:/a:xlight_ftp_server:xlight_ftp_server:1.52

CVE-2004-0255

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:00.980-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040205 Remote crash Xlight ftp server 1.52 BID 9585 XF xlight-long-string-dos(15064) Xlight 1.52, with log to screen enabled, allows remote attackers to cause a denial of service by requesting a long directory consisting of . (dot) and / (slash) characters, which causes the server to crash when the administrator views the log file, possibly triggering a buffer overflow.

cpe:/a:gnu:libtool:1.0 cpe:/a:gnu:libtool:1.1 cpe:/a:gnu:libtool:1.2 cpe:/a:gnu:libtool:1.3 cpe:/a:gnu:libtool:1.3.2 cpe:/a:gnu:libtool:1.3.3 cpe:/a:gnu:libtool:1.3.4 cpe:/a:gnu:libtool:1.3.5 cpe:/a:gnu:libtool:1.4 cpe:/a:gnu:libtool:1.4.1 cpe:/a:gnu:libtool:1.4.2 cpe:/a:gnu:libtool:1.4.3 cpe:/a:gnu:libtool:1.5

CVE-2004-0256

2004-11-23T00:00:00.000-05:00

2018-05-02T21:29:24.413-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONECTIVA CLA-2004:811 MISC http://www.geocrawler.com/mail/msg.php3?msg_id=3438808&list=405 BUGTRAQ 20040130 Symlink Vulnerability in GNU libtool <1.5.2 BID 9530 XF libtool-insecure-temp-directory(15017) GNU libtool before 1.5.2, during compile time, allows local users to overwrite arbitrary files via a symlink attack on libtool directories in /tmp.

cpe:/o:netbsd:netbsd:1.6 cpe:/o:netbsd:netbsd:1.6.1 cpe:/o:openbsd:openbsd:3.0 cpe:/o:openbsd:openbsd:3.1 cpe:/o:openbsd:openbsd:3.2 cpe:/o:openbsd:openbsd:3.3 cpe:/o:openbsd:openbsd:3.4

CVE-2004-0257

2004-11-23T00:00:00.000-05:00

2017-10-09T21:30:19.297-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov NETBSD NetBSD-SA2004-002 FULLDISC 20040204 Remote openbsd crash with ip6, yet still openbsd much better than windows BUGTRAQ 20040205 OpenBSD IPv6 remote kernel crash MISC http://www.guninski.com/obsdmtu.html CONFIRM http://www.openbsd.org/cgi-bin/cvsweb/src/sys/netinet6/ip6_output.c BID 9577 XF openbsd-ipv6-dos(15044) OpenBSD 3.4 and NetBSD 1.6 and 1.6.1 allow remote attackers to cause a denial of service (crash) by sending an IPv6 packet with a small MTU to a listening port and then issuing a TCP connect to that port.

cpe:/a:realnetworks:realone_desktop_manager cpe:/a:realnetworks:realone_enterprise_desktop:6.0.11.774 cpe:/a:realnetworks:realone_player:1.0 cpe:/a:realnetworks:realone_player:2.0 cpe:/a:realnetworks:realone_player:2.0::win cpe:/a:realnetworks:realone_player:6.0.11.818 cpe:/a:realnetworks:realone_player:6.0.11.830 cpe:/a:realnetworks:realone_player:6.0.11.841 cpe:/a:realnetworks:realone_player:6.0.11.853 cpe:/a:realnetworks:realone_player:6.0.11.868 cpe:/a:realnetworks:realplayer:8.0::mac_os cpe:/a:realnetworks:realplayer:8.0::unix cpe:/a:realnetworks:realplayer:8.0::win32 cpe:/a:realnetworks:realplayer:10.0_beta

CVE-2004-0258

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:01.040-04:00

7.6

NETWORK

HIGH

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

VULNWATCH 20040204 [VulnWatch] Multiple File Format Vulnerabilities (Overruns) in REALOne & RealPlayer BUGTRAQ 20040204 Multiple File Format Vulnerabilities (Overruns) in REALOne & RealPlayer CIAC O-075 CERT-VN VU#473814 MISC http://www.nextgenss.com/advisories/realone.txt BID 9579 CONFIRM http://www.service.real.com/help/faq/security/040123_player/EN/ XF realoneplayer-multiple-file-bo(15040) Multiple buffer overflows in RealOne Player, RealOne Player 2.0, RealOne Enterprise Desktop, and RealPlayer Enterprise allow remote attackers to execute arbitrary code via malformed (1) .RP, (2) .RT, (3) .RAM, (4) .RPM or (5) .SMIL files.

cpe:/a:joe_lumbroso_acks:formmail.php:2.0 cpe:/a:joe_lumbroso_acks:formmail.php:5.0

CVE-2004-0259

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:01.087-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040206 formmail (PHP) Upload file using CSS BID 9591 XF jack-formmail-file-upload(15079) The check_referer() function in Formmail.php 5.0 and earlier allows remote attackers to bypass access restrictions via an empty or spoofed HTTP Referer, as demonstrated using an application on the same web server that contains a cross-site scripting (XSS) issue.

cpe:/a:cactusoft:cactushop_lite:5.0

CVE-2004-0260

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:01.150-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20040206 CactuSoft CactuShop 5.0 Lite shopping cart software backdoor BUGTRAQ 20040206 CactuSoft CactuShop 5.0 Lite shopping cart software backdoor BID 9589 XF cactushoplite-backdoor(15063) The AddToMailingList function in CactuSoft CactuShop 5.0 Lite contains a backdoor that allows remote attackers to delete arbitrary files via an email address that starts with |||.

cpe:/a:openjournal:openjournal:2.0 cpe:/a:openjournal:openjournal:2.0_1 cpe:/a:openjournal:openjournal:2.0_2 cpe:/a:openjournal:openjournal:2.0_3 cpe:/a:openjournal:openjournal:2.0_4 cpe:/a:openjournal:openjournal:2.0_5

CVE-2004-0261

2004-11-23T00:00:00.000-05:00

2018-05-02T21:29:24.507-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040206 Open Journal Blog Authenticaion Bypassing Vulnerability CONFIRM http://www.grohol.com/downloads/oj/latest/changelog.txt BID 9598 XF openjournal-uid-admin-access(15069) oj.cgi in OpenJournal 2.0 through 2.0.5 allows remote attackers to bypass authentication and access the control panel via a 0 in the uid parameter.

cpe:/a:the_palace:the_palace_client:3.5

CVE-2004-0262

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:01.197-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

VULNWATCH 20040207 The Palace 3.x (Client) Stack Overflow Vulnerability BUGTRAQ 20040207 The Palace 3.x (Client) Stack Overflow Vulnerability MISC http://www.elitehaven.net/thepalace.txt BID 9602 XF palace-server-address-bo(15074) Stack-based buffer overflow in The Palace 3.5 and earlier client allows remote attackers to execute arbitrary code via a link to a palace:// url followed by a long server address string.

cpe:/a:apache:http_server:1.0 cpe:/a:apache:http_server:1.0.2 cpe:/a:apache:http_server:1.0.3 cpe:/a:apache:http_server:1.0.5 cpe:/a:apache:http_server:1.1 cpe:/a:apache:http_server:1.1.1 cpe:/a:apache:http_server:1.2 cpe:/a:apache:http_server:1.2.5 cpe:/a:apache:http_server:1.3 cpe:/a:apache:http_server:1.3.1 cpe:/a:apache:http_server:1.3.3 cpe:/a:apache:http_server:1.3.4 cpe:/a:apache:http_server:1.3.6 cpe:/a:apache:http_server:1.3.7::dev cpe:/a:apache:http_server:1.3.9 cpe:/a:apache:http_server:1.3.11 cpe:/a:apache:http_server:1.3.12 cpe:/a:apache:http_server:1.3.14 cpe:/a:apache:http_server:1.3.17 cpe:/a:apache:http_server:1.3.18 cpe:/a:apache:http_server:1.3.19 cpe:/a:apache:http_server:1.3.20 cpe:/a:apache:http_server:1.3.22 cpe:/a:apache:http_server:1.3.23 cpe:/a:apache:http_server:1.3.24 cpe:/a:apache:http_server:1.3.25 cpe:/a:apache:http_server:1.3.26 cpe:/a:apache:http_server:1.3.27 cpe:/a:apache:http_server:1.3.28 cpe:/a:apache:http_server:1.3.29 cpe:/a:apache:http_server:2.0 cpe:/a:apache:http_server:2.0.9 cpe:/a:apache:http_server:2.0.28 cpe:/a:apache:http_server:2.0.28:beta cpe:/a:apache:http_server:2.0.32 cpe:/a:apache:http_server:2.0.35 cpe:/a:apache:http_server:2.0.36 cpe:/a:apache:http_server:2.0.37 cpe:/a:apache:http_server:2.0.38 cpe:/a:apache:http_server:2.0.39 cpe:/a:apache:http_server:2.0.40 cpe:/a:apache:http_server:2.0.41 cpe:/a:apache:http_server:2.0.42 cpe:/a:apache:http_server:2.0.43 cpe:/a:apache:http_server:2.0.44 cpe:/a:apache:http_server:2.0.45 cpe:/a:apache:http_server:2.0.46 cpe:/a:apache:http_server:2.0.47 cpe:/a:apache:http_server:2.0.48 cpe:/a:ibm:http_server:1.3.19

CVE-2004-0263

2004-11-23T00:00:00.000-05:00

2017-10-09T21:30:19.360-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov GENTOO GLSA-200402-01 BID 9599 XF php-virtualhost-info-disclosure(15072) PHP 4.3.4 and earlier in Apache 1.x and 2.x (mod_php) can leak global variables between virtual hosts that are handled by the same Apache child process but have different settings, which could allow remote attackers to obtain sensitive information.

cpe:/a:jim_rees:jim_rees_httpd:palmos cpe:/a:shaun2k2:palmhttpd:3.0

CVE-2004-0264

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:01.243-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040208 PalmOS httpd accept() queue overflow DoS vulnerability. BID 9608 XF palmhttpd-accept-bo(15090) palmhttpd for PalmOS allows remote attackers to cause a denial of service (crash) by establishing two simultaneous HTTP connections, which exceeds the PalmOS accept queue.

cpe:/a:francisco_burzi:php-nuke:6.0 cpe:/a:francisco_burzi:php-nuke:6.5 cpe:/a:francisco_burzi:php-nuke:6.5_beta1 cpe:/a:francisco_burzi:php-nuke:6.5_final cpe:/a:francisco_burzi:php-nuke:6.5_rc1 cpe:/a:francisco_burzi:php-nuke:6.5_rc2 cpe:/a:francisco_burzi:php-nuke:6.5_rc3 cpe:/a:francisco_burzi:php-nuke:6.6 cpe:/a:francisco_burzi:php-nuke:6.7 cpe:/a:francisco_burzi:php-nuke:6.9 cpe:/a:francisco_burzi:php-nuke:7.0 cpe:/a:francisco_burzi:php-nuke:7.0_final cpe:/a:francisco_burzi:php-nuke:7.1

CVE-2004-0265

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:01.307-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040208 [waraxe-2004-SA#002] - Cross-Site Scripting (XSS) in Php-Nuke 7.1.0 BID 9605 BID 9613 XF phpnuke-mulitple-xss(15076) Cross-site scripting (XSS) vulnerability in modules.php for Php-Nuke 6.x-7.1.0 allows remote attackers to execute arbitrary script as other users via URL-encoded (1) title or (2) fname parameters in the News or Reviews modules.

CVE-2004-0266

2004-11-23T00:00:00.000-05:00

2017-07-18T21:29:00.753-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040208 [waraxe-2004-SA#003] - SQL injection in Php-Nuke 7.1.0 BID 9615 XF phpnuke-publicmessage-sql-injection(15080) SQL injection vulnerability in the "public message" capability (public_message) for Php-Nuke 6.x to 7.1.0 allows remote attackers to obtain the administrator password via the c_mid parameter.

cpe:/a:ca:inoculateit:6.0

CVE-2004-0267

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:01.417-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040209 [local problems] eTrust Virus Protection 6.0 InoculateIT for linux MISC http://www.excluded.org/advisories/advisory10.txt BID 9616 XF etrust-inoculateit-symlink(15102) The (1) inoregupdate, (2) uniftest, or (3) unimove scripts in eTrust InoculateIT for Linux 6.0 allow local users to overwrite arbitrary files via a symlink attack on files in /tmp.

cpe:/a:evolutionx:evolutionx:build_3921 cpe:/a:evolutionx:evolutionx:build_3935

CVE-2004-0268

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:01.463-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FULLDISC 20040210 XBOX EvolutionX ftp 'cd' command and telnet 'dir' buffer overflow BUGTRAQ 20040210 XBOX EvolutionX ftp 'cd' command and telnet 'dir' buffer overflow BID 9631 XF evolutionx-command-line-dos(15104) Multiple buffer overflows in EvolutionX 3921 and 3935 allow remote attackers to cause a denial of service (hang) via (1) a long cd command to the FTP server, or (2) a long dir command to the telnet server.

cpe:/a:francisco_burzi:php-nuke:1.0 cpe:/a:francisco_burzi:php-nuke:2.5 cpe:/a:francisco_burzi:php-nuke:3.0 cpe:/a:francisco_burzi:php-nuke:4.0 cpe:/a:francisco_burzi:php-nuke:4.3 cpe:/a:francisco_burzi:php-nuke:4.4 cpe:/a:francisco_burzi:php-nuke:4.4.1a cpe:/a:francisco_burzi:php-nuke:5.0 cpe:/a:francisco_burzi:php-nuke:5.0.1 cpe:/a:francisco_burzi:php-nuke:5.1 cpe:/a:francisco_burzi:php-nuke:5.2 cpe:/a:francisco_burzi:php-nuke:5.2a cpe:/a:francisco_burzi:php-nuke:5.3.1 cpe:/a:francisco_burzi:php-nuke:5.4 cpe:/a:francisco_burzi:php-nuke:5.5 cpe:/a:francisco_burzi:php-nuke:5.6 cpe:/a:francisco_burzi:php-nuke:6.0 cpe:/a:francisco_burzi:php-nuke:6.5 cpe:/a:francisco_burzi:php-nuke:6.5_beta1 cpe:/a:francisco_burzi:php-nuke:6.5_final cpe:/a:francisco_burzi:php-nuke:6.5_rc1 cpe:/a:francisco_burzi:php-nuke:6.5_rc2 cpe:/a:francisco_burzi:php-nuke:6.5_rc3 cpe:/a:francisco_burzi:php-nuke:6.6 cpe:/a:francisco_burzi:php-nuke:6.7 cpe:/a:francisco_burzi:php-nuke:6.9

CVE-2004-0269

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:01.510-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040210 [SCAN Associates Sdn Bhd Security Advisory] PHPNuke 6.9 > and below SQL Injection in multiple module MISC http://www.scan-associates.net/papers/phpnuke69.txt BID 9630 XF phpnuke-modules-sql-injection(15115) SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary SQL code and gain sensitive information via (1) the category variable in the Search module or (2) the admin variable in the Web_Links module.

cpe:/a:clam_anti-virus:clamav:0.65

CVE-2004-0270

2004-11-23T00:00:00.000-05:00

2017-10-09T21:30:19.407-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040209 clamav 0.65 remote DOS exploit GENTOO GLSA-200402-07 CONFIRM http://www.freebsd.org/cgi/query-pr.cgi?pr=62586 BID 9610 XF clam-antivirus-uuencoded-dos(15077) libclamav in Clam AntiVirus 0.65 allows remote attackers to cause a denial of service (crash) via a uuencoded e-mail message with an invalid line length (e.g., a lowercase character), which causes an assert error in clamd that terminates the calling program.

cpe:/a:maxwebportal:maxwebportal:1.30 cpe:/a:maxwebportal:maxwebportal:1.31

CVE-2004-0271

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:01.557-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040210 XSS, Sql Injection and Avatar ScriptCode Injection in MaxWebPortal BID 9625 XF maxwebportal-multiple-xss(15120) XF maxwebportal-register-xss(15122) Multiple cross-site scripting vulnerabilities (XSS) in MaxWebPortal allow remote attackers to execute arbitrary web script as other users via (1) the sub_name parameter of dl_showall.asp, (2) the SendTo parameter in Personal Messages, (3) the HTTP_REFERER for down.asp, or (4) the image name of an Avatar in the register form.

cpe:/a:maxwebportal:maxwebportal:1.30 cpe:/a:maxwebportal:maxwebportal:1.31

CVE-2004-0272

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:01.603-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040210 XSS, Sql Injection and Avatar ScriptCode Injection in MaxWebPortal BID 9625 XF maxwebportal-personalmesssages-sql-injection(15121) SQL injection vulnerability in MaxWebPortal allows remote attackers to inject arbitrary SQL code and gain sensitive information via the SendTo parameter in Personal Messages.

CVE-2004-0273

2004-11-23T00:00:00.000-05:00

2017-10-09T21:30:19.470-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040210 Directory traversal in RealPlayer allows code execution CONFIRM http://service.real.com/help/faq/security/040123_player/EN/ CERT-VN VU#514734 BID 9580 XF realoneplayer-rmp-directory-traversal(15123) Directory traversal vulnerability in RealOne Player, RealOne Player 2.0, and RealOne Enterprise Desktop allows remote attackers to upload arbitrary files via an RMP file that contains .. (dot dot) sequences in a .rjs skin file.

cpe:/a:eggheads:eggdrop_irc_bot:1.6.10 cpe:/a:eggheads:eggdrop_irc_bot:1.6.11 cpe:/a:eggheads:eggdrop_irc_bot:1.6.12 cpe:/a:eggheads:eggdrop_irc_bot:1.6.13 cpe:/a:eggheads:eggdrop_irc_bot:1.6.14 cpe:/a:eggheads:eggdrop_irc_bot:1.6.15

CVE-2004-0274

2004-11-23T00:00:00.000-05:00

2017-10-09T21:30:19.533-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040208 Eggrop bug BUGTRAQ 20040210 Re: Eggrop bug MISC http://mogan.nonsoloirc.com/egg_advisory.txt CONFIRM http://www.eggheads.org/news/2004/04/10/26 BID 9606 XF eggdrop-sharemod-gain-access(15084) Share.mod in Eggheads Eggdrop IRC bot 1.6.10 through 1.6.15 can mistakenly assign STAT_OFFERED status to a bot that is not a sharebot, which allows remote attackers to use STAT_OFFERED to promote a bot to a sharebot and conduct unauthorized activities.

cpe:/a:bosdev:bosdates:3.0 cpe:/a:bosdev:bosdates:3.1 cpe:/a:bosdev:bosdates:3.2

CVE-2004-0275

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:01.683-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040211 ZH2004-05SA (security advisory): Sql Injection Vulnerability in BosDates BID 9639 MISC http://www.zone-h.org/en/advisories/read/id=3925/ XF bosdates-calendar-sql-injection(15133) SQL injection vulnerability in calendar_download.php in BosDates 3.2 and earlier allows remote attackers to obtain sensitive information and gain access via the calendar parameter.

cpe:/a:monkey-project:monkey_http_daemon:0.1.1 cpe:/a:monkey-project:monkey_http_daemon:0.5.2 cpe:/a:monkey-project:monkey_http_daemon:0.6.0 cpe:/a:monkey-project:monkey_http_daemon:0.6.1 cpe:/a:monkey-project:monkey_http_daemon:0.6.2 cpe:/a:monkey-project:monkey_http_daemon:0.6.3 cpe:/a:monkey-project:monkey_http_daemon:0.7.0 cpe:/a:monkey-project:monkey_http_daemon:0.7.1 cpe:/a:monkey-project:monkey_http_daemon:0.7.2 cpe:/a:monkey-project:monkey_http_daemon:0.8.0 cpe:/a:monkey-project:monkey_http_daemon:0.8.1

CVE-2004-0276

2004-11-23T00:00:00.000-05:00

2017-10-09T21:30:19.580-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://aluigi.altervista.org/poc/monkeydos.zip BUGTRAQ 20040211 Denial of Service in Monkey httpd <= 0.8.1 CONFIRM http://monkeyd.sourceforge.net/ BID 9642 XF monkey-getrealstring-dos(15187) The get_real_string function in Monkey HTTP Daemon (monkeyd) 0.8.1 and earlier allows remote attackers to cause a denial of service (crash) via an HTTP request with a sequence of "%" characters and a missing Host field.

cpe:/a:bolintech:dream_ftp_server:1.02

CVE-2004-0277

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:01.760-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20040207 DreamFTP Server 1.02 Buffer Overflow BUGTRAQ 20040211 Re: [Full-Disclosure] DreamFTP Server 1.02 Buffer Overflow BID 9600 MISC http://www.security-protocols.com/modules.php?name=News&file=article&sid=1722 XF dreamftp-username-format-string(15070) Format string vulnerability in Dream FTP 1.02 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in the username.

cpe:/a:ratbag:dirt_track_racing:1.0.3 cpe:/a:ratbag:dirt_track_racing:2.0 cpe:/a:ratbag:dirt_track_racing_australia cpe:/a:ratbag:dirt_track_racing_sprint_cars cpe:/a:ratbag:leadfoot cpe:/a:ratbag:world_of_outlaws_sprint_cars

CVE-2004-0278

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:01.837-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040211 Denial of Service in Ratbag's game engine BID 9644 XF ratbag-data-length-dos(15188) Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet that specifies the length of data to read and then sends a second TCP packet that contains less data than specified, which causes Ratbag to repeatedly check the socket for more data.

cpe:/a:aim_sniff:aim_sniff:0.6 cpe:/a:aim_sniff:aim_sniff:0.7 cpe:/a:aim_sniff:aim_sniff:0.8 cpe:/a:aim_sniff:aim_sniff:0.9 cpe:/a:aim_sniff:aim_sniff:0.9b

CVE-2004-0279

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:01.887-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040212 aimSniff.pl file "deletion" (local) BID 9653 XF aim-sniff-symlink(15199) AIM Sniff (aimSniff.pl) 0.9b allows local users to overwrite arbitrary files via a symlink attack on /tmp/AS.log.

cpe:/a:caucho_technology:resin:2.1.12

CVE-2004-0280

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:01.933-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040205 Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access Resin Forbidden Directory ("/WEB-INF/") BID 9614 XF resin-source-disclosure(15085) Caucho Technology Resin 2.1.12 allows remote attackers to view JSP source via an HTTP request to a .jsp file that ends in a "%20" (encoded space character), e.g. index.jsp%20.

cpe:/a:caucho:resin:2.1.12

CVE-2004-0281

2004-11-23T00:00:00.000-05:00

2019-06-12T13:04:17.123-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2019-06-12T12:29:14.847-04:00

BUGTRAQ 20040205 Apache Http Server Reveals Script Source Code to Remote Users And Any Users Can Access Resin Forbidden Directory ("/WEB-INF/") BID 9617 XF resin-dotdot-directory-traversal(15087) Caucho Technology Resin 2.1.12 allows remote attackers to gain sensitive information and view the contents of the /WEB-INF/ directory via an HTTP request for "WEB-INF..", which is equivalent to "WEB-INF" in Windows.

cpe:/a:crob:crob_ftp_server:3.5.2

CVE-2004-0282

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:02.197-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040212 crob ftpd Denial of Service BID 9651 XF crob-multiple-connections-dos(15201) Crob FTP daemon 3.5.2 allows remote attackers to cause a denial of service (crash) by repeatedly connecting to and disconnecting from the server.

cpe:/a:mailmgr:mailmgr:1.2.3

CVE-2004-0283

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:02.290-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040212 Symlink vulnerabilities in mailmgr BID 9654 XF mailmgr-insecure-temp-directory(15203) Mailmgr 1.2.3 allows local users to overwrite arbitrary files via a symlink attack on (1) /tmp/mailmgr.unsort, (2) /tmp/mailmgr.tmp, or (3) /tmp/mailmgr.sort.

cpe:/a:microsoft:ie:6.0 cpe:/a:microsoft:ie:6.0:sp1 cpe:/a:microsoft:outlook:2002 cpe:/a:microsoft:outlook:2002:sp1 cpe:/a:microsoft:outlook:2002:sp2 cpe:/a:microsoft:outlook:2003

CVE-2004-0284

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:02.337-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040210 ASPR #2004-01-20-1: Internet Explorer/Outlook double null character DoS BID 9629 XF ie-host-null-dos(15127) Microsoft Internet Explorer 6.0, Outlook 2002, and Outlook 2003 allow remote attackers to cause a denial of service (CPU consumption), if "Do not save encrypted pages to disk" is disabled, via a web site or HTML e-mail that contains two null characters (%00) after the host name.

cpe:/a:voice_of_web:allmyguests:0.1.2 cpe:/a:voice_of_web:allmyguests:0.3 cpe:/a:voice_of_web:allmyguests:0.4 cpe:/a:voice_of_web:allmyguests:0.4.1 cpe:/a:voice_of_web:allmylinks:0.3 cpe:/a:voice_of_web:allmylinks:0.4 cpe:/a:voice_of_web:allmylinks:0.4.1 cpe:/a:voice_of_web:allmylinks:0.4.3 cpe:/a:voice_of_web:allmylinks:0.4.4 cpe:/a:voice_of_web:allmylinks:0.4.9 cpe:/a:voice_of_web:allmylinks:0.5 cpe:/a:voice_of_web:allmyvisitors:0.3 cpe:/a:voice_of_web:allmyvisitors:0.4

CVE-2004-0285

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:02.400-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040214 AllMyGuests PHP Code Injection vulnerability BUGTRAQ 20040214 AllMyVisitors PHP Code Injection vulnerability BUGTRAQ 20040214 AllMyLinks PHP Code Injection vulnerability BID 9664 XF allmylinks-file-include(15226) XF allmyguests-php-file-include(15227) XF allmyvisitors-file-include(15228) PHP remote file inclusion vulnerabilities in include/footer.inc.php in (1) AllMyVisitors, (2) AllMyLinks, and (3) AllMyGuests allow remote attackers to execute arbitrary PHP code via a URL in the _AMVconfig[cfg_serverpath] parameter.

cpe:/a:robotftp:robotftp_server:1.0 cpe:/a:robotftp:robotftp_server:2.0_beta_1

CVE-2004-0286

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:02.447-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040215 buffer overflow in Robot FTP Server BID 9672 XF robot-username-bo(15225) Buffer overflow in RobotFTP 1.0 and 2.0 beta 1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long username.

cpe:/a:xlight_ftp_server:xlight_ftp_server:1.52

CVE-2004-0287

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:02.497-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040215 Xlight ftp server 1.52 RETR bug BID 9668 XF xlight-retr-dos(15220) Xlight FTP server 1.52 allows remote authenticated users to cause a denial of service (crash) via a RETR command with a long argument containing a large number of / (slash) characters, possibly triggering a buffer overflow.

CVE-2004-0288

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:02.540-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040215 Buffer overflow in mnoGoSearch BID 9667 XF mnogosearch-udmdoctotextbuf-bo(15209) Buffer overflow in the UdmDocToTextBuf function in mnoGoSearch 3.2.13 through 3.2.15 could allow remote attackers to execute arbitrary code by indexing a large document.

cpe:/a:paul_l_daniels:signaturedb:0.1.1

CVE-2004-0289

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:02.587-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040215 problems with database files in 'SignatureDB' BID 9661 XF signaturedb-sdbscan-bo(15217) Buffer overflow in sdbscan in SignatureDB 0.1.1 allows local users to cause a denial of service (segmentation fault) via a database file that contains a large key parameter.

cpe:/a:freeform_interactive:purge:1.4.7 cpe:/a:freeform_interactive:purge_jihad:2.0.1

CVE-2004-0290

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:02.637-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040216 Broadcast client buffer-overflow in Purge Jihad <= 2.0.1 CONFIRM http://purge.worthplaying.com/phpbb/viewtopic.php?t=1167 BID 9671 XF purge-battletype-map-bo(15216) Buffer overflow in Purge Jihad 2.0.1 and earlier allows remote game servers to execute arbitrary code via an information packet that contains large (1) battle type and (2) map name fields.

cpe:/a:yabb:yabb:1.5.4::second_edition cpe:/a:yabb:yabb:1.5.5::second_edition

CVE-2004-0291

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:02.683-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040216 Another YabbSE SQL Injection BID 9674 XF yabb-post-sql-injection(15224) SQL injection vulnerability in post.php for YaBB SE 1.5.4 and 1.5.5 allows remote attackers to obtain hashed passwords via the quote parameter.

cpe:/a:karjasoft:sami_http_server:1.0.4

CVE-2004-0292

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:02.730-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040217 KarjaSoft Sami HTTP Server 1.0.4 Buffer Overflow BID 9679 MISC http://www.security-protocols.com/modules.php?name=News&file=article&sid=1746 XF sami-http-get-bo(15237) Buffer overflow in KarjaSoft Sami HTTP Server 1.0.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request.

cpe:/a:shopcartcgi:shopcartcgi:2.3

CVE-2004-0293

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:02.790-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040217 ZH2004-06SA (security advisory): ShopCartCGI v2.3 Remote BID 9670 MISC http://www.zone-h.org/en/advisories/read/id=3962/ XF shopcartcgi-dotdot-directory-traversal(14982) Directory traversal vulnerability in ShopCartCGI 2.3 allows remote attackers to retrieve arbitrary files via a .. (dot dot) in a HTTP request to (1) gotopage.cgi or (2) genindexpage.cgi.

cpe:/a:yabb:yabb:1_gold_-_sp_1.3.1

CVE-2004-0294

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:02.837-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040217 YABB information leakage on failed login BID 9677 XF yabb-invalidmessage-obtain-information(15236) YaBB 1 SP 1.3.1 displays different error messages when a user exists or not, which makes it easier for remote attackers to identify valid users and conduct a brute force password guessing attack.

cpe:/a:transsoft:broker_ftp_server:6.1_.0.0

CVE-2004-0295

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:02.900-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040217 Broker FTP DoS (Message Server) MISC http://www.securiteam.com/windowsntfocus/5IP0B0AC1I.html BID 9680 XF broker-ftp-tsftpsrv-dos(15242) TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a denial of service (CPU consumption) via an open idle connection.

cpe:/a:transsoft:broker_ftp_server:6.1_.0.0

CVE-2004-0296

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:02.963-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040217 Broker FTP DoS (Message Server) MISC http://www.securiteam.com/windowsntfocus/5IP0B0AC1I.html BID 9680 XF broker-ftp-dos(15241) TsFtpSrv.exe in Broker FTP 6.1.0.0 allows remote attackers to cause a TsFtpSrv.exe to exit with an exception by opening and immediately closing a connection.

cpe:/a:ipswitch:imail:8.0.3 cpe:/a:ipswitch:imail:8.0.5

CVE-2004-0297

2004-11-23T00:00:00.000-05:00

2017-10-09T21:30:19.640-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20040217 Ipswitch IMail LDAP Daemon Remote Buffer Overflow CONFIRM http://www.ipswitch.com/support/imail/releases/imail_professional/im805HF2.html CERT-VN VU#972334 BID 9682 XF imail-ldap-tag-bo(15243) Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via an LDAP message with a large tag length.

cpe:/a:aclogic:cesarftp:0.99e

CVE-2004-0298

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:03.010-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040217 CesarFTP 0.99 : 100% employment of computer resources BID 9666 XF cesarftp-userpass-dos(15252) CesarFTP 0.99e allows remote attackers to cause a denial of service (CPU consumption) via a long RETR parameter.

cpe:/a:smallftpd:smallftpd:1.0.3

CVE-2004-0299

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:03.057-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040217 Smallftpd 1.0.3 DoS BID 9684 XF smallftpd-forwardslash-dos(15262) Buffer overflow in smallftpd 0.99 allows local users to cause a denial of service (crash) via an FTP request with a large number of "/" (slash) characters.

cpe:/a:ecommerce_corporation_online:store_kit:3.0_lite cpe:/a:ecommerce_corporation_online:store_kit:3.0_pro cpe:/a:ecommerce_corporation_online:store_kit:3.0_standard

CVE-2004-0300

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:03.103-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040218 ZH2004-07SA (security advisory): Multiple Sql injection SECTRACK 1009092 BID 9676 BID 9687 MISC http://www.systemsecure.org/advisories/ssadvisory16022004.php MISC http://www.zone-h.org/en/advisories/read/id=3972/ XF onlinestorekit-more-sql-injection(15232) SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorized access via (1) the cat parameter in shop.php, (2) the id parameter in more.php, (3) the cat_manufacturer parameter in shop_by_brand.php, or (4) the id parameter in listing.php.

cpe:/a:ecommerce_corporation_online:store_kit:3.0_lite cpe:/a:ecommerce_corporation_online:store_kit:3.0_pro cpe:/a:ecommerce_corporation_online:store_kit:3.0_standard

CVE-2004-0301

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:03.167-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SECTRACK 1009079 BID 9676 MISC http://www.systemsecure.org/advisories/ssadvisory16022004.php XF onlinestorekit-more-xss(15235) Cross-site scripting (XSS) vulnerability in more.php for Online Store Kit 3.0 allows remote attackers to inject arbitrary HTML via the id parameter.

cpe:/a:fools_workshop:owls_workshop:1.0

CVE-2004-0302

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:03.230-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040218 ZH2004-08SA (security advisory): OWLS 1.0 Remote arbitrary files BID 9689 MISC http://www.zone-h.org/en/advisories/read/id=3973/ XF owls-file-retrieval(15249) Directory traversal vulnerability in OWLS 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) file parameter in index.php, (2) editfile in glossary.php, or (3) editfile in newmultiplechoice.php.

CVE-2004-0303

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:03.290-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040218 ZH2004-08SA (security advisory): OWLS 1.0 Remote arbitrary files BID 9689 MISC http://www.zone-h.org/en/advisories/read/id=3973/ XF owls-file-retrieval(15249) OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in (1) the file parameter in /glossaries/index.php, (2) the filename parameter in /readings/index.php, or (3) the filename parameter in /multiplechoice/resultsignore.php, as demonstrated using /etc/passwd.

cpe:/a:webcortex:webstores_2000:6.0

CVE-2004-0304

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:03.337-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040218 WebCortex Webstores2000 version 6.0 multiple security vulnerabilities BID 7766 MISC http://www.s-quadra.com/advisories/Adv-20040218.txt XF webstores-browseitems-sql-injection(15253) SQL injection vulnerability in browse_items.asp in WebCortex WebStores 2000 6.0 allows remote attackers to gain unauthorized access and execute arbitrary commands via the Search_Text parameter.

cpe:/a:webcortex:webstores_2000:6.0

CVE-2004-0305

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:03.400-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040218 WebCortex Webstores2000 version 6.0 multiple security vulnerabilities BID 9693 XF webstores-error-xss(15254) Cross-site scripting (XSS) vulnerability in error.asp in WebCortex WebStores 2000 6.0 allows remote attackers to execute arbitrary script as other users and steal session IDs via the Message_id parameter.

cpe:/a:cisco:optical_networking_systems_software:1.0 cpe:/a:cisco:optical_networking_systems_software:4.0%281%29 cpe:/a:cisco:optical_networking_systems_software:4.0%282%29 cpe:/a:cisco:optical_networking_systems_software:4.0.0 cpe:/a:cisco:optical_networking_systems_software:4.1%280%29 cpe:/a:cisco:optical_networking_systems_software:4.1%281%29 cpe:/a:cisco:optical_networking_systems_software:4.1%282%29 cpe:/a:cisco:optical_networking_systems_software:4.1%283%29 cpe:/a:cisco:optical_networking_systems_software:4.1.0 cpe:/a:cisco:optical_networking_systems_software:4.5

CVE-2004-0306

2004-11-23T00:00:00.000-05:00

2018-10-30T12:26:17.390-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CISCO 20040219 Cisco ONS 15327, ONS 15454, ONS 15454 SDH, and ONS 15600 Vulnerabilities BID 9699 XF cisco-ons-file-upload(15264) Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS 15600 before 1.3(0) enable TFTP service on UDP port 69 by default, which allows remote attackers to GET or PUT ONS system files on the current active TCC in the /flash0 or /flash1 directories.

CVE-2004-0307

2004-11-23T00:00:00.000-05:00

2018-10-30T12:26:17.390-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CISCO 20040219 Cisco ONS 15327, ONS 15454, ONS 15454 SDH, and ONS 15600 Vulnerabilities BID 9699 XF cisco-ons-ack-dos(15265) Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), and ONS 15454 SD before 4.1(3) allows remote attackers to cause a denial of service (reset) by not sending the ACK portion of the TCP three-way handshake and sending an invalid response instead.

CVE-2004-0308

2004-11-24T00:00:00.000-05:00

2018-10-30T12:26:17.390-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CISCO 20040219 Cisco ONS 15327, ONS 15454, ONS 15454 SDH, and ONS 15600 Vulnerabilities BID 9699 XF cisco-ons-gain-access(15266) Unknown vulnerability in Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS15600 before 1.3(0) allows a superuser whose account is locked out, disabled, or suspended to gain unauthorized access via a Telnet connection to the VxWorks shell.

cpe:/a:zonelabs:integrity:4.0 cpe:/a:zonelabs:zonealarm:4.0 cpe:/a:zonelabs:zonealarm:4.0::plus cpe:/a:zonelabs:zonealarm:4.0::pro cpe:/a:zonelabs:zonealarm:4.5::pro

CVE-2004-0309

2004-11-23T00:00:00.000-05:00

2017-10-09T21:30:19.813-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://download.zonelabs.com/bin/free/securityAlert/8.html BUGTRAQ 20040219 EEYE: ZoneLabs SMTP Processing Buffer Overflow CIAC O-084 CERT-VN VU#619982 BID 9696 XF zonelabs-multiple-products-bo(14991) Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLabs Integrity client 4.0 before 4.0.146.046, and 4.5 before 4.5.085, allows remote attackers to execute arbitrary code via a long RCPT TO argument.

cpe:/a:livejournal:livejournal

CVE-2004-0310

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:03.510-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040219 LiveJournal XSS BID 9700 XF livejournal-url-xss(15268) Cross-site scripting (XSS) vulnerability in LiveJournal 1.0 and 1.1 allows remote attackers to execute Javascript as other users via the stylesheet, which does not strip the semicolon or parentheses, as demonstrated using a background:url.

cpe:/h:apc:ap9606:3.0 cpe:/h:apc:ap9606:3.0.1

CVE-2004-0311

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:03.573-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040216 APC 9606 SmartSlot Web/SNMP management card "backdoor" BUGTRAQ 20040219 Re: Fw: APC 9606 SmartSlot Web/SNMP management card "backdoor" CONFIRM http://nam-en.apc.com/cgi-bin/nam_en.cfg/php/enduser/std_adp.php?p_faqid=3131&p_created=1077139129 BID 9681 XF apc-smartslot-default-password(15238) American Power Conversion (APC) Web/SNMP Management SmartSlot Card 3.0 through 3.0.3 and 3.21 are shipped with a default password of TENmanUFactOryPOWER, which allows remote attackers to gain unauthorized access.

cpe:/h:linksys:wap55ag:1.0.7

CVE-2004-0312

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:03.620-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040217 SNMP community string disclosure in Linksys WAP55AG BUGTRAQ 20040219 Re: SNMP community string disclosure in Linksys WAP55AG BID 9688 XF linksys-snmp-strings-disclosure(15257) Linksys WAP55AG 1.07 allows remote attackers with access to an SNMP read only community string to gain access to read/write communtiy strings via a query for OID 1.3.6.1.4.1.3955.2.1.13.1.2.

cpe:/a:psoproxy:psoproxy_server:0.91

CVE-2004-0313

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:03.667-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040220 Remote Buffer Overflow in PSOProxy 0.91 BID 9706 XF psoproxy-long-get-bo(15275) Buffer overflow in PSOProxy 0.91 allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long HTTP request, as demonstrated using a long (1) GET argument or (2) method name.

cpe:/a:freewebs:webzedit:1.9

CVE-2004-0314

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:03.730-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040221 Cross Site Scripting in WebzEdit XF webzedit-done-xss(15289) Cross-site scripting (XSS) vulnerability in done.jsp in WebzEdit 1.9 and earlier allows remote attackers to execute arbitrary script as other users via the message parameter.

cpe:/a:avirt:voice:4.0

CVE-2004-0315

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:03.777-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040223 Remote Buffer Overflow in Avirt Voice 4.0 BID 9721 XF avirt-voice-get-bo(15288) Buffer overflow in Avirt Voice 4.0 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long GET request on port 1080.

cpe:/a:avirt:avirt_soho:4.3

CVE-2004-0316

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:03.837-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20030223 Multiple Remote Buffer Overflow in Avirt Soho 4.3 BID 9722 BID 9723 XF avirt-soho-multiple-bo(15286) Buffer overflow in Avirt Soho 4.3 allows remote attackers to cause a denial of service (crash) via (1) a large GET request to port 1080 or (2) a large GET request of % characters to port 8080.

cpe:/a:platform:lsf:4.0 cpe:/a:platform:lsf:4.2 cpe:/a:platform:lsf:5.0 cpe:/a:platform:lsf:5.1 cpe:/a:platform:lsf:6.0

CVE-2004-0317

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:03.900-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040223 Lam3rZ Security Advisory #1/2004: LSF eauth vulnerability leads to remote code execution BID 9719 XF lsf-eauth-execute-code(15282) Buffer overflow in eauth in Load Sharing Facility 4.x, 5.x, and 6.x allows local users or remote attackers within the LSF cluster to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a long LSF_From_PC parameter.

cpe:/a:platform:lsf:4.0 cpe:/a:platform:lsf:4.2 cpe:/a:platform:lsf:5.0 cpe:/a:platform:lsf:5.1 cpe:/a:platform:lsf:6.0

CVE-2004-0318

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:03.947-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040223 Lam3rZ Security Advisory #2/2004: LSF eauth vulnerability leads to a possibility of controlling cluster jobs on behalf of other users BID 9724 XF lsf-eauth-process-hijack(15278) Load Sharing Facility (LSF) 4.x, 5.x, and 6.x uses the LSF_EAUTH_UID environment variable, if it exists, instead of the real UID of the user, which could allow remote attackers within the local cluster to gain privileges.

cpe:/a:ezboard:ezboard:7.3u

CVE-2004-0319

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:03.997-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040223 ezBoard Cross Site Scripting Vulnerability BID 9725 XF ezboard-font-xss(15287) Cross-site scripting (XSS) vulnerability in the font tag in ezBoard 7.3u allows remote attackers to execute arbitrary script as other users, as demonstrated using the background:url in a (1) font color or (2) font face argument.

cpe:/h:ncipher:nshield:1.71.11 cpe:/h:ncipher:nshield:1.71.15 cpe:/h:ncipher:nshield:1.71.90 cpe:/h:ncipher:nshield:1.75.15 cpe:/h:ncipher:nshield:1.77.9 cpe:/h:ncipher:nshield:1.77.93 cpe:/h:ncipher:nshield:1.77.97 cpe:/h:ncipher:nshield:1.79.12 cpe:/h:ncipher:nshield:1.79.80 cpe:/h:ncipher:nshield:1.79.81 cpe:/h:ncipher:nshield:2.0 cpe:/h:ncipher:nshield:2.0.4 cpe:/h:ncipher:nshield:2.12 cpe:/h:ncipher:nshield:2.12.2

CVE-2004-0320

2004-11-23T00:00:00.000-05:00

2017-10-09T21:30:19.860-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040223 nCipher Advisory #9: Host-side attackers can access secret data BID 9717 XF ncipher-hsm-obtain-info(15281) Unknown vulnerability in nCipher Hardware Security Modules (HSM) 1.67.x through 1.99.x allows local users to access secrets stored in the module's run-time memory via certain sequences of commands.

cpe:/a:singularity_software:team_factor:1.25 cpe:/a:singularity_software:team_factor:1.25m

CVE-2004-0321

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:04.040-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040223 Remote server crash in Team Factor <= 1.25 BID 9708 MISC http://www.zone-h.org/advisories/read/id=4006 XF teamfactor-packet-dos(15274) Team Factor 1.25 and earlier allows remote attackers to cause a denial of service (crash) via a packet that uses a negative number to specify the size of the data block that follows, which causes Team Factor to read unallocated memory.

cpe:/a:xmb_forum:xmb:1.8 cpe:/a:xmb_forum:xmb:1.8_sp1 cpe:/a:xmb_forum:xmb:1.8_sp2

CVE-2004-0322

2004-02-23T00:00:00.000-05:00

2017-07-10T21:30:04.103-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040225 Re: [waraxe-2004-SA#004] - Multiple vulnerabilities in XMB 1.8 Partagium Final SP2 BUGTRAQ 20040223 [waraxe-2004-SA#004] - Multiple vulnerabilities in XMB 1.8 Partagium Final SP2 BID 9726 CONFIRM http://www.xmbforum.com/community/boards/viewthread.php?tid=746859 XF xmb-multiple-scripts-xss(15292) XF xmb-bbcode-execute-code(15294) Multiple cross-site scripting (XSS) vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to execute arbitrary script as other users via the (1) member parameter in member.php, (2) uid parameter in u2uadmin.php, (3) user parameter in editprofile.php, (4) an onmouseover event in an align tag when bbcode is allowed, or (5) img tag where bbcode is allowed.

cpe:/a:xmb_forum:xmb:1.8 cpe:/a:xmb_forum:xmb:1.8_sp1 cpe:/a:xmb_forum:xmb:1.8_sp2

CVE-2004-0323

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:04.167-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040225 Re: [waraxe-2004-SA#004] - Multiple vulnerabilities in XMB 1.8 Partagium Final SP2 BUGTRAQ 20040326 [waraxe-2004-SA#012 - Multiple vulnerabilities in XMB Forum 1.8 SP3 and 1.9 beta] BUGTRAQ 20040223 [waraxe-2004-SA#004] - Multiple vulnerabilities in XMB 1.8 Partagium Final SP2 BID 9726 CONFIRM http://www.xmbforum.com/community/boards/viewthread.php?tid=746859 XF xmb-multiple-sql-injection(15295) Multiple SQL injection vulnerabilities in XMB 1.8 Final SP2 allow remote attackers to inject arbitrary SQL and gain privileges via the (1) ppp parameter in viewthread.php, (2) desc parameter in misc.php, (3) tpp parameter in forumdisplay.php, (4) ascdesc parameter in forumdisplay.php, or (5) the addon parameter in stats.php. NOTE: it has also been shown that item (3) is also in XMB 1.9 beta.

cpe:/a:confirm:confirm:0.50 cpe:/a:confirm:confirm:0.51 cpe:/a:confirm:confirm:0.52 cpe:/a:confirm:confirm:0.53 cpe:/a:confirm:confirm:0.54 cpe:/a:confirm:confirm:0.55 cpe:/a:confirm:confirm:0.60 cpe:/a:confirm:confirm:0.61 cpe:/a:confirm:confirm:0.62

CVE-2004-0324

2004-02-23T00:00:00.000-05:00

2017-07-10T21:30:04.230-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20040223 Lam3rZ Security Advisory #3/2004: A bug in Confirm leads to remote command execution BID 9728 XF confirm-header-gain-access(15290) Confirm 0.62 and earlier could allow remote attackers to execute arbitrary code via an e-mail header that contains shell metacharacters such as ", `, |, ;, or $.

cpe:/a:typsoft:typsoft_ftp_server:1.10

CVE-2004-0325

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:04.277-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040223 TYPSoft FTP Server 1.10 multiple vulnerabilities BID 9702 XF typsoft-ftp-command-dos(15306) TYPSoft FTP Server 1.10 allows remote authenticated users to cause a denial of service (CPU consumption) via "//../" arguments to (1) mkd, (2) xmkd, (3) dele, (4) size, (5) retr, (6) stor, (7) appe, (8) rnfr, (9) rnto, (10) rmd, or (11) xrmd, as demonstrated using "//../qwerty".

cpe:/a:proxy-pro:professional_gatekeeper:4.7

CVE-2004-0326

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:04.323-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20040222 GateKeeper Pro 4.7 buffer overflow BUGTRAQ 20040222 GateKeeper Pro 4.7 buffer overflow BID 9716 XF gatekeeper-long-get-bo(15277) Buffer overflow in the web proxy for GateKeeper Pro 4.7 allows remote attackers to execute arbitrary code via a long GET request.

cpe:/a:skintech:phpnewsmanager:1.36

CVE-2004-0327

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:04.417-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040223 ZH2004-09SA (security advisory): PhpNewsManager Remote arbitrary BID 9720 MISC http://www.zone-h.org/advisories/read/id=4024 XF phpnewsmanager-dotdot-directory-traversal(15283) Directory traversal vulnerability in functions.php in PhpNewsManager 1.46 allows remote attackers to retrieve arbitrary files via .. (dot dot) sequences in the clang parameter.

cpe:/h:gigabyte:gn-b46b:1.003.00

CVE-2004-0328

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:04.463-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040224 Gigabyte Broadband Router - Multiple Vulnerabilities BID 9740 XF gigabyte-gnb46b-bypass-authentication(15313) Gigabyte Gn-B46B 2.4Ghz wireless broadband router firmware 1.003.00 allows local users on the same local network as the router to bypass authentication by using a copy of the router's html menu on a separate system.

cpe:/a:freechat:freechat:0.1.1a cpe:/a:freechat:freechat:1.1.1a

CVE-2004-0329

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:04.510-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040226 Denial Of Service in FreeChat 1.1.1a BID 9744 XF freechat-string-dos(15321) FreeChat 1.1.1a allows remote attackers to cause a denial of service (crash) via certain unexpected strings, as demonstrated using "aaaaa".

cpe:/a:serv-u:serv-u:3.0.0.16 cpe:/a:serv-u:serv-u:3.0.0.17 cpe:/a:serv-u:serv-u:3.1.0.0 cpe:/a:serv-u:serv-u:3.1.0.1 cpe:/a:serv-u:serv-u:3.1.0.3 cpe:/a:serv-u:serv-u:4.0.0.4 cpe:/a:serv-u:serv-u:4.1.0.0 cpe:/a:serv-u:serv-u:4.1.0.3 cpe:/a:serv-u:serv-u:5.0.0.0

CVE-2004-0330

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:04.573-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040226 [vulnwatch] Serv-U MDTM Command Buffer Overflow Vulnerability MISC http://www.cnhonker.com/advisory/serv-u.mdtm.txt BID 9751 XF servu-mdtm-bo(15323) Buffer overflow in Serv-U ftp before 5.0.0.4 allows remote authenticated users to execute arbitrary code via a long time zone argument to the MDTM command.

cpe:/a:dell:openmanage:3.2 cpe:/a:dell:openmanage:3.4 cpe:/a:dell:openmanage:3.7 cpe:/a:dell:openmanage:3.7.1

CVE-2004-0331

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:04.620-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040226 Dell OpenManage Web Server Heap Overflow (Pre-Auth) MISC http://sh0dan.org/files/domadv.txt BID 9750 XF dell-openmanage-ocsgetoeminpathfile-bo(15325) Heap-based buffer overflow in Dell OpenManage Web Server 3.4.0 allows remote attackers to cause a denial of service (crash) via a HTTP POST with a long application variable.

cpe:/a:extremail:extremail:1.0 cpe:/a:extremail:extremail:1.0.1 cpe:/a:extremail:extremail:1.0.2 cpe:/a:extremail:extremail:1.0.3 cpe:/a:extremail:extremail:1.1 cpe:/a:extremail:extremail:1.1.1 cpe:/a:extremail:extremail:1.1.2 cpe:/a:extremail:extremail:1.1.3 cpe:/a:extremail:extremail:1.1.4 cpe:/a:extremail:extremail:1.1.5 cpe:/a:extremail:extremail:1.1.6 cpe:/a:extremail:extremail:1.1.7 cpe:/a:extremail:extremail:1.1.8 cpe:/a:extremail:extremail:1.1.9 cpe:/a:extremail:extremail:1.1.10 cpe:/a:extremail:extremail:1.5 cpe:/a:extremail:extremail:1.5.5 cpe:/a:extremail:extremail:1.5.8 cpe:/a:extremail:extremail:1.5.9

CVE-2004-0332

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:04.683-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040226 Extremail Security Problem BID 9754 XF extremail-password-gain-access(15329) Extremail 1.5.9 does not check passwords correctly when they are all digits or begin with a digit, which allows remote attackers to gain privileges.

cpe:/a:openpkg:openpkg cpe:/a:uudeview:uudeview:0.5.18 cpe:/a:uudeview:uudeview:0.5.19 cpe:/a:winzip:winzip:7.0 cpe:/a:winzip:winzip:8.0 cpe:/a:winzip:winzip:8.1 cpe:/a:winzip:winzip:8.1:sr1 cpe:/o:gentoo:linux:1.4 cpe:/o:gentoo:linux:1.4:rc1 cpe:/o:gentoo:linux:1.4:rc2 cpe:/o:gentoo:linux:1.4:rc3

CVE-2004-0333

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:04.747-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CIAC O-092 IDEFENSE 20040227 WinZip MIME Parsing Buffer Overflow Vulnerability CERT-VN VU#116182 CONFIRM http://www.openpkg.org/security/OpenPKG-SA-2004.006-uudeview.html BID 9758 CONFIRM http://www.winzip.com/fmwz90.htm XF winzip-mime-bo(15336) XF uudeview-multiple-bo(15490) Buffer overflow in the UUDeview package, as used in WinZip 6.2 through WinZip 8.1 SR-1, and possibly other packages, allows remote attackers to execute arbitrary code via a MIME archive with certain long MIME parameters.

cpe:/h:innomedia:innomedia_videophone:au75200xvi04010x

CVE-2004-0334

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:04.807-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040227 InnoMedia VideoPhone Authorization Bypass SECTRACK 1009522 XF InnoMedia-videophone-bypass-authentication(15636) InnoMedia VideoPhone allows remote attackers to bypass Basic Authorization via an HTTP request to (1) videophone_admindetail.asp, (2) videophone_syscfg.asp, (3) videophone_upgrade.asp, or (4) videophone_sysctrl.asp that contains a trailing / (slash). NOTE: the original report mentioned AXIS 2100 Network Camera, but this was likely a cut-and-paste error.

cpe:/a:software602:602pro_lan_suite

CVE-2004-0335

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:04.853-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040310 Re: LAN SUITE Web Mail 602Pro Multiple Vulnerabilities BUGTRAQ 20040228 LAN SUITE Web Mail 602Pro Multiple Vulnerabilities BID 9780 XF 602pro-directory-listing(15349) LAN SUITE Web Mail 602Pro, when configured to use the "Directory browsing" feature, allows remote attackers to obtain a directory listing via an HTTP request to (1) index.html, (2) cgi-bin/, or (3) users/.

cpe:/a:software602:602pro_lan_suite:2002 cpe:/a:software602:602pro_lan_suite:2003

CVE-2004-0336

2004-11-23T00:00:00.000-05:00

2017-10-09T21:30:19.923-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040310 Re: LAN SUITE Web Mail 602Pro Multiple Vulnerabilities BUGTRAQ 20040228 LAN SUITE Web Mail 602Pro Multiple Vulnerabilities BID 9781 XF 602pro-path-disclosure(15350) LAN SUITE Web Mail 602Pro allows remote attackers to gain sensitive information via the mail login form, which contains the path to the mail directory.

cpe:/a:software602:602pro_lan_suite:2002 cpe:/a:software602:602pro_lan_suite:2003

CVE-2004-0337

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:04.917-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040310 Re: LAN SUITE Web Mail 602Pro Multiple Vulnerabilities BUGTRAQ 20040228 LAN SUITE Web Mail 602Pro Multiple Vulnerabilities BID 9777 XF 602pro-index-xss(15351) Cross-site scripting (XSS) vulnerability in LAN SUITE Web Mail 602Pro allows remote attackers to execute arbitrary script or HTML as other users via a URL to index.html, followed by a / (slash) and the desired script. NOTE: the vendor states that this bug could not be reproduced, so this issue may be REJECTed in the future.

cpe:/a:invision_power_services:invision_board:1.0 cpe:/a:invision_power_services:invision_board:1.0.1 cpe:/a:invision_power_services:invision_board:1.1.1 cpe:/a:invision_power_services:invision_board:1.1.2 cpe:/a:invision_power_services:invision_board:1.2 cpe:/a:invision_power_services:invision_board:1.3 cpe:/a:invision_power_services:invision_board:2.0_alpha_3 cpe:/a:invision_power_services:invision_board:2.0_pdr3

CVE-2004-0338

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:04.963-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040228 Invision Power Board SQL injection! BID 9766 XF invision-search-sql-injection(15343) SQL injection vulnerability in search.php for Invision Board Forum allows remote attackers to execute arbitrary SQL queries via the st parameter.

cpe:/a:phpbb_group:phpbb:2.0 cpe:/a:phpbb_group:phpbb:2.0.1 cpe:/a:phpbb_group:phpbb:2.0.2 cpe:/a:phpbb_group:phpbb:2.0.3 cpe:/a:phpbb_group:phpbb:2.0.4 cpe:/a:phpbb_group:phpbb:2.0.5 cpe:/a:phpbb_group:phpbb:2.0.6 cpe:/a:phpbb_group:phpbb:2.0.6c cpe:/a:phpbb_group:phpbb:2.0_rc4

CVE-2004-0339

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:05.027-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040228 New phpBB ViewTopic.php Cross Site Scripting Vulnerability BID 9765 XF phpbb-viewtopicphp-xss(15348) Cross-site scripting (XSS) vulnerability in ViewTopic.php in phpBB, possibly 2.0.6c and earlier, allows remote attackers to execute arbitrary script or HTML as other users via the postorder parameter.

cpe:/a:texas_imperial_software:wftpd:3.0 cpe:/a:texas_imperial_software:wftpd:3.0::pro cpe:/a:texas_imperial_software:wftpd:3.0_0r3 cpe:/a:texas_imperial_software:wftpd:3.0_0r4 cpe:/a:texas_imperial_software:wftpd:3.0_0r4::pro cpe:/a:texas_imperial_software:wftpd:3.0_0r5 cpe:/a:texas_imperial_software:wftpd:3.0_0r5::pro cpe:/a:texas_imperial_software:wftpd:3.10_r1 cpe:/a:texas_imperial_software:wftpd:3.20 cpe:/a:texas_imperial_software:wftpd:3.21 cpe:/a:texas_imperial_software:wftpd:pro_3.10_r1 cpe:/a:texas_imperial_software:wftpd:pro_3.20 cpe:/a:texas_imperial_software:wftpd:pro_3.21

CVE-2004-0340

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:05.087-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040228 Critical WFTPD buffer overflow vulnerability BID 9767 XF wftpd-ftp-commands-bo(15340) Stack-based buffer overflow in WFTPD Pro Server 3.21 Release 1, Pro Server 3.20 Release 2, Server 3.21 Release 1, and Server 3.10 allows local users to execute arbitrary code via long (1) LIST, (2) NLST, or (3) STAT commands.

CVE-2004-0341

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:05.137-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040228 Multiple WFTPD Denial of Service vulnerabilities BID 9767 XF wftpd-string-0Ahbyte-dos(15341) WFTPD Pro Server 3.21 Release 1 allocates memory for a command until a 0Ah byte (newline) is sent, which allows local users to cause a denial of service (CPU consumption) by continuing to send a long command that does not contain a newline.

CVE-2004-0342

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:05.197-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040228 Multiple WFTPD Denial of Service vulnerabilities BID 9767 XF wftpd-ftp-command-dos(15342) WFTPD Pro Server 3.21 Release 1, with the XeroxDocutech option enabled, allows local users to cause a denial of service (crash) via a (1) MKD or (2) XMKD command that causes an absolute path of 260 characters to be used, which overwrites a cookie with a null character, possibly due to an off-by-one error.

cpe:/a:yabb:yabb:1.5.4::second_edition cpe:/a:yabb:yabb:1.5.5::second_edition cpe:/a:yabb:yabb:1.5.5b::second_edition

CVE-2004-0343

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:05.247-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040301 YabbSE (3 on 1) BID 9774 XF yabb-multiple-sql-injection(15354) Multiple SQL injection vulnerabilities in YaBB SE 1.5.4 through 1.5.5b allow remote attackers to execute arbitrary SQL via (1) the msg parameter in ModifyMessage.php or (2) the postid parameter in ModifyMessage.php.

cpe:/a:yabb:yabb:1.5.5::second_edition cpe:/a:yabb:yabb:1.5.5b::second_edition

CVE-2004-0344

2004-11-23T00:00:00.000-05:00

2016-10-17T22:44:16.513-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040301 YabbSE (3 on 1) BID 9774 Directory traversal vulnerability in ModifyMessage.php in YaBB SE 1.5.4 through 1.5.5b allows remote attackers to delete arbitrary files via a .. (dot dot) in the attachOld parameter.

cpe:/a:volition:red_faction:1.0 cpe:/a:volition:red_faction:1.1 cpe:/a:volition:red_faction:1.20

CVE-2004-0345

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:05.293-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040301 Clients broadcast buffer overflow in Red Faction <= 1.20 BID 9775 XF redfaction-bo(15353) Buffer overflow in Red Faction client 1.20 and earlier allows remote servers to execute arbitrary code via a long server name.

cpe:/a:proftpd_project:proftpd:1.2.7 cpe:/a:proftpd_project:proftpd:1.2.8 cpe:/a:proftpd_project:proftpd:1.2.9_rc1 cpe:/a:proftpd_project:proftpd:1.2.9_rc2

CVE-2004-0346

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:05.353-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040302 The Cult of a Cardinal Number BID 9782 XF proftpd-offbyone-bo(15387) Off-by-one buffer overflow in _xlate_ascii_write() in ProFTPD 1.2.7 through 1.2.9rc2p allows local users to gain privileges via a 1024 byte RETR command.

cpe:/h:netscreen:netscreen-sa_5000_series

CVE-2004-0347

2004-11-23T00:00:00.000-05:00

2017-10-09T21:30:19.987-04:00

6.0

NETWORK

MEDIUM

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20040302 03-02-04 XSS Bug in NetScreen-SA 5000 Series of SSL VPN appliance BUGTRAQ 20040302 03-02-04 XSS Bug in NetScreen-SA 5000 Series of SSL VPN appliance BUGTRAQ 20040304 NetScreen Advisory 58412: XSS Bug in NetScreen-SA SSL VPN CERT-VN VU#114070 BID 9791 XF netscreen-delhomepagecgi-xss(15368) Cross-site scripting (XSS) vulnerability in delhomepage.cgi in NetScreen-SA 5000 Series running firmware 3.3 Patch 1 (build 4797) allows remote authenticated users to execute arbitrary script as other users via the row parameter.

cpe:/a:spidersales:spidersales:2.0

CVE-2004-0348

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:05.400-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040303 Spider Sales shopping cart software multiple security vulnerabilities BID 9799 MISC http://www.s-quadra.com/advisories/Adv-20040303.txt XF spidersales-userid-sql-injection(15371) SQL injection vulnerability in viewCart.asp in SpiderSales shopping cart software allows remote attackers to execute arbitrary SQL via the userId parameter.

cpe:/a:gweb:gweb_http_server:0.5 cpe:/a:gweb:gweb_http_server:0.6

CVE-2004-0349

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:05.463-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040303 directory traversal in GWeb 0.6 BID 9742 XF gweb-dotdot-directory-traversal(15381) Directory traversal vulnerability in GWeb HTTP Server 0.6 allows remote attackers to view arbitrary files via a .. (dot dot) in the URL.

cpe:/a:spidersales:spidersales:2.0

CVE-2004-0350

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:05.510-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20040303 Spider Sales shopping cart software multiple security vulnerabilities BUGTRAQ 20040303 Spider Sales shopping cart software multiple security vulnerabilities BID 9799 MISC http://www.s-quadra.com/advisories/Adv-20040303.txt XF spidersales-weak-encryption(15370) SpiderSales shopping cart does not enforce a minimum length for the private key, which can make it easier for local users to obtain the private key by factoring.

cpe:/a:spidersales:spidersales:2.0

CVE-2004-0351

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:05.557-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20040303 Spider Sales shopping cart software multiple security vulnerabilities BUGTRAQ 20040303 Spider Sales shopping cart software multiple security vulnerabilities BID 9799 XF spidersales-weak-encryption(15370) Spider Sales shopping cart stores the private key in the same database and table as the public key, which allows local users with access to the database to decrypt data.

cpe:/h:cisco:content_services_switch_11000 cpe:/h:cisco:content_services_switch_11050 cpe:/h:cisco:content_services_switch_11150 cpe:/h:cisco:content_services_switch_11800

CVE-2004-0352

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:05.620-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CISCO 20040304 Cisco CSS 11000 Series Content Services Switches Malformed UDP Packet Vulnerability CERT-VN VU#363374 BID 9806 XF cisco-css-udp-dos(15388) Cisco 11000 Series Content Services Switches (CSS) running WebNS 5.0(x) before 05.0(04.07)S, and 6.10(x) before 06.10(02.05)S allow remote attackers to cause a denial of service (device reset) via a malformed packet to UDP port 5002.

cpe:/a:gnu:anubis:3.6.0 cpe:/a:gnu:anubis:3.6.1 cpe:/a:gnu:anubis:3.6.2 cpe:/a:gnu:anubis:3.9.92 cpe:/a:gnu:anubis:3.9.93

CVE-2004-0353

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:05.667-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MLIST [bug-anubis] 20040228 Important security update BUGTRAQ 20040304 GNU Anubis buffer overflows and format string bugs BUGTRAQ 20040310 GNU Anubis 3.6.2 remote root exploit BID 9772 XF anubis-ident-bo(15345) Multiple buffer overflows in auth_ident() function in auth.c for GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to gain privileges via a long string.

cpe:/a:gnu:anubis:3.6.0 cpe:/a:gnu:anubis:3.6.1 cpe:/a:gnu:anubis:3.6.2 cpe:/a:gnu:anubis:3.9.92 cpe:/a:gnu:anubis:3.9.93

CVE-2004-0354

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:05.730-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MLIST [bug-anubis] 20040228 Important security update BUGTRAQ 20040304 GNU Anubis buffer overflows and format string bugs BID 9772 XF anubis-format-string(15346) Multiple format string vulnerabilities in GNU Anubis 3.6.0 through 3.6.2, 3.9.92 and 3.9.93 allow remote attackers to execute arbitrary code via format string specifiers in strings passed to (1) the info function in log.c, (2) the anubis_error function in errs.c, or (3) the ssl_error function in ssl.c.

cpe:/a:invision_power_services:invision_board:1.3

CVE-2004-0355

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:05.777-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040305 Invision Power Board 1.3 Final Path Disclosure Vulnerability BID 9810 XF invision-invalid-path-disclosure(15400) Invision Power Board 1.3 Final allows remote attackers to gain sensitive information by selecting a file for "Personal Photo" that is not an image file, which displays the installation path in an error message.

cpe:/a:seattle_lab_software:slmail_pro:2.0 cpe:/a:seattle_lab_software:slmail_pro:2.0.1 cpe:/a:seattle_lab_software:slmail_pro:2.0.2 cpe:/a:seattle_lab_software:slmail_pro:2.0.3 cpe:/a:seattle_lab_software:slmail_pro:2.0.4 cpe:/a:seattle_lab_software:slmail_pro:2.0.5 cpe:/a:seattle_lab_software:slmail_pro:2.0.6 cpe:/a:seattle_lab_software:slmail_pro:2.0.7 cpe:/a:seattle_lab_software:slmail_pro:2.0.8 cpe:/a:seattle_lab_software:slmail_pro:2.0.9

CVE-2004-0356

2004-11-23T00:00:00.000-05:00

2017-10-09T21:30:20.063-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://216.26.170.92/Download/webfiles/Patches/SLMPPatch-2.0.14.pdf BUGTRAQ 20040305 SLMail Pro Supervisor Report Center Buffer Overflow (#NISR05022004a) MISC http://www.nextgenss.com/advisories/slmailsrc.txt BID 9809 XF slmail-src-stack-bo(15398) Stack-based buffer overflow in Supervisor Report Center in SL Mail Pro 2.0.9 and earlier allows remote attackers to execute arbitrary code via an HTTP request with a long HTTP sub-version.

cpe:/a:seattle_lab_software:slmail_pro:2.0.9

CVE-2004-0357

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:05.837-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://216.26.170.92/Download/webfiles/Patches/SLMPPatch-2.0.14.pdf BUGTRAQ 20040305 SLWebMail Multiple Buffer Overflow Vulnerabilities (#NISR05022004b) MISC http://www.nextgenss.com/advisories/slmailwm.txt BID 9808 XF slmail-slwebmail-bo(15399) Stack-based buffer overflows in SL Mail Pro 2.0.9 allow remote attackers to execute arbitrary code via (1) user.dll, (2) loadpageadmin.dll or (3) loadpageuser.dll.

cpe:/a:virtuasystems:virtuanews_pro:1.0 cpe:/a:virtuasystems:virtuanews_pro:1.0.1 cpe:/a:virtuasystems:virtuanews_pro:1.0.2 cpe:/a:virtuasystems:virtuanews_pro:1.0.3

CVE-2004-0358

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:05.887-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040307 RE: VirtuaNews Admin Panel 1.0.3 Pro Cross Site Scripting Vulnerabillity BUGTRAQ 20040305 VirtuaNews Admin Panel 1.0.3 Pro Cross Site Scripting Vulnerabillity BID 9812 BID 9819 XF virtuanews-multiple-xss(15402) Cross-site scripting (XSS) vulnerability in VirtuaNews Admin Panel Pro 1.0.3 allows remote attackers to execute arbitrary script as other users via (1) the mainnews parameter in admin.php, (2) the expand parameter in admin.php, (3) the id parameter in admin.php, (4) the catid parameter in admin.php, or (5) an unnamed parameter during the newslogo_upload action in admin.php.

cpe:/a:invision_power_services:invision_board:1.3.1_final cpe:/a:invision_power_services:invision_board:1.3_final

CVE-2004-0359

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:05.947-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040305 Invision Power Board v1.3 Final Cross Site Scripting Vulnerabillity BID 9768 XF invision-xss(15403) Cross-site scripting (XSS) vulnerability in index.php for Invision Power Board 1.3 final allows remote attackers to execute arbitrary script as other users via the (1) c, (2) f, (3) showtopic, (4) showuser, or (5) username parameters.

cpe:/o:sun:solaris:8.0::x86 cpe:/o:sun:solaris:9.0::sparc cpe:/o:sun:solaris:9.0::x86 cpe:/o:sun:sunos:5.8

CVE-2004-0360

2004-11-23T00:00:00.000-05:00

2018-10-30T12:25:37.090-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 200470305 O-088: Sun passwd(1) Command Vulnerability SUNALERT 57454 CIAC O-088 CERT-VN VU#694782 BID 9757 XF solaris-passwd-gain-privileges(15327) Unknown vulnerability in passwd(1) in Solaris 8.0 and 9.0 allows local users to gain privileges via unknown attack vectors.

CVE-2004-0361

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:06.043-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040306 Safari javascript array overflow MISC http://www.insecure.ws/article.php?story=2004021918172533 BID 9815 XF safari-array-dos(15413) The Javascript engine in Safari 1.2 and earlier allows remote attackers to cause a denial of service (segmentation fault) by creating a new Array object with a large size value, then writing into that array.

cpe:/a:iss:blackice_agent_server:3.6ebz cpe:/a:iss:blackice_agent_server:3.6eca cpe:/a:iss:blackice_agent_server:3.6ecb cpe:/a:iss:blackice_agent_server:3.6ecc cpe:/a:iss:blackice_agent_server:3.6ecd cpe:/a:iss:blackice_agent_server:3.6ece cpe:/a:iss:blackice_agent_server:3.6ecf cpe:/a:iss:blackice_pc_protection:3.6cbz cpe:/a:iss:blackice_pc_protection:3.6cca cpe:/a:iss:blackice_pc_protection:3.6ccb cpe:/a:iss:blackice_pc_protection:3.6ccc cpe:/a:iss:blackice_pc_protection:3.6ccd cpe:/a:iss:blackice_pc_protection:3.6cce cpe:/a:iss:blackice_pc_protection:3.6ccf cpe:/a:iss:blackice_server_protection:3.6cbz cpe:/a:iss:blackice_server_protection:3.6cca cpe:/a:iss:blackice_server_protection:3.6ccb cpe:/a:iss:blackice_server_protection:3.6ccc cpe:/a:iss:blackice_server_protection:3.6ccd cpe:/a:iss:blackice_server_protection:3.6cce cpe:/a:iss:blackice_server_protection:3.6ccf cpe:/a:iss:realsecure_desktop:3.6ebz cpe:/a:iss:realsecure_desktop:3.6eca cpe:/a:iss:realsecure_desktop:3.6ecb cpe:/a:iss:realsecure_desktop:3.6ecd cpe:/a:iss:realsecure_desktop:3.6ece cpe:/a:iss:realsecure_desktop:3.6ecf cpe:/a:iss:realsecure_desktop:7.0eba cpe:/a:iss:realsecure_desktop:7.0ebf cpe:/a:iss:realsecure_desktop:7.0ebg cpe:/a:iss:realsecure_desktop:7.0ebh cpe:/a:iss:realsecure_desktop:7.0ebj cpe:/a:iss:realsecure_desktop:7.0ebk cpe:/a:iss:realsecure_desktop:7.0ebl cpe:/a:iss:realsecure_guard:3.6ebz cpe:/a:iss:realsecure_guard:3.6eca cpe:/a:iss:realsecure_guard:3.6ecb cpe:/a:iss:realsecure_guard:3.6ecc cpe:/a:iss:realsecure_guard:3.6ecd cpe:/a:iss:realsecure_guard:3.6ece cpe:/a:iss:realsecure_guard:3.6ecf cpe:/a:iss:realsecure_network_sensor:7.0 cpe:/a:iss:realsecure_network_sensor:7.0:xpu_20.11 cpe:/a:iss:realsecure_network_sensor:7.0:xpu_22.10 cpe:/a:iss:realsecure_network_sensor:7.0:xpu_22.4 cpe:/a:iss:realsecure_network_sensor:7.0:xpu_22.9 cpe:/a:iss:realsecure_sentry:3.6ebz cpe:/a:iss:realsecure_sentry:3.6eca cpe:/a:iss:realsecure_sentry:3.6ecb cpe:/a:iss:realsecure_sentry:3.6ecc cpe:/a:iss:realsecure_sentry:3.6ecd cpe:/a:iss:realsecure_sentry:3.6ece cpe:/a:iss:realsecure_sentry:3.6ecf cpe:/a:iss:realsecure_server_sensor:6.0::windows cpe:/a:iss:realsecure_server_sensor:6.0.1::windows cpe:/a:iss:realsecure_server_sensor:6.0.1_win_sr1.1 cpe:/a:iss:realsecure_server_sensor:6.5::windows cpe:/a:iss:realsecure_server_sensor:6.5:sr3.2:windows cpe:/a:iss:realsecure_server_sensor:6.5:sr3.3:windows cpe:/a:iss:realsecure_server_sensor:6.5_win_sr3.1 cpe:/a:iss:realsecure_server_sensor:6.5_win_sr3.4 cpe:/a:iss:realsecure_server_sensor:6.5_win_sr3.5 cpe:/a:iss:realsecure_server_sensor:6.5_win_sr3.6 cpe:/a:iss:realsecure_server_sensor:6.5_win_sr3.7 cpe:/a:iss:realsecure_server_sensor:6.5_win_sr3.8 cpe:/a:iss:realsecure_server_sensor:6.5_win_sr3.9 cpe:/a:iss:realsecure_server_sensor:6.5_win_sr3.10 cpe:/a:iss:realsecure_server_sensor:7.0:xpu22.1 cpe:/a:iss:realsecure_server_sensor:7.0:xpu22.10 cpe:/a:iss:realsecure_server_sensor:7.0:xpu22.11 cpe:/a:iss:realsecure_server_sensor:7.0:xpu22.2 cpe:/a:iss:realsecure_server_sensor:7.0:xpu22.3 cpe:/a:iss:realsecure_server_sensor:7.0:xpu22.4 cpe:/a:iss:realsecure_server_sensor:7.0:xpu22.5 cpe:/a:iss:realsecure_server_sensor:7.0:xpu22.6 cpe:/a:iss:realsecure_server_sensor:7.0:xpu22.7 cpe:/a:iss:realsecure_server_sensor:7.0:xpu22.8 cpe:/a:iss:realsecure_server_sensor:7.0:xpu22.9 cpe:/h:iss:proventia_a_series_xpu:20.11 cpe:/h:iss:proventia_a_series_xpu:22.1 cpe:/h:iss:proventia_a_series_xpu:22.2 cpe:/h:iss:proventia_a_series_xpu:22.3 cpe:/h:iss:proventia_a_series_xpu:22.4 cpe:/h:iss:proventia_a_series_xpu:22.5 cpe:/h:iss:proventia_a_series_xpu:22.6 cpe:/h:iss:proventia_a_series_xpu:22.7 cpe:/h:iss:proventia_a_series_xpu:22.8 cpe:/h:iss:proventia_a_series_xpu:22.9 cpe:/h:iss:proventia_a_series_xpu:22.10 cpe:/h:iss:proventia_g_series_xpu:22.1 cpe:/h:iss:proventia_g_series_xpu:22.2 cpe:/h:iss:proventia_g_series_xpu:22.3 cpe:/h:iss:proventia_g_series_xpu:22.4 cpe:/h:iss:proventia_g_series_xpu:22.5 cpe:/h:iss:proventia_g_series_xpu:22.6 cpe:/h:iss:proventia_g_series_xpu:22.7 cpe:/h:iss:proventia_g_series_xpu:22.8 cpe:/h:iss:proventia_g_series_xpu:22.9 cpe:/h:iss:proventia_g_series_xpu:22.10 cpe:/h:iss:proventia_g_series_xpu:22.11 cpe:/h:iss:proventia_m_series_xpu:1.1 cpe:/h:iss:proventia_m_series_xpu:1.2 cpe:/h:iss:proventia_m_series_xpu:1.3 cpe:/h:iss:proventia_m_series_xpu:1.4 cpe:/h:iss:proventia_m_series_xpu:1.5 cpe:/h:iss:proventia_m_series_xpu:1.6 cpe:/h:iss:proventia_m_series_xpu:1.7 cpe:/h:iss:proventia_m_series_xpu:1.8 cpe:/h:iss:proventia_m_series_xpu:1.9

CVE-2004-0362

2004-04-15T00:00:00.000-04:00

2017-07-10T21:30:06.120-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040318 EEYE: Internet Security Systems PAM ICQ Server Response Processing Vulnerability CIAC O-104 EEYE AD20040318 CERT-VN VU#947254 BID 9913 ISS 20040318 Vulnerability in ICQ Parsing in ISS Products XF pam-icq-parsing-bo(15442) XF witty-worm-propagation(15543) Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote attackers to execute arbitrary code via a SRV_MULTI response containing a SRV_USER_ONLINE response packet and a SRV_META_USER response packet with long (1) nickname, (2) firstname, (3) lastname, or (4) email address fields, as exploited by the Witty worm.

cpe:/a:symantec:norton_antispam:2004

CVE-2004-0363

2004-04-15T00:00:00.000-04:00

2017-07-10T21:30:06.183-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20040319 Norton AntiSpam Remote Buffer Overrun (#NISR19042004a) BUGTRAQ 20040319 Ref: NGSSoftware Advisories NISR19042004a and NISR19042004b CERT-VN VU#344718 MISC http://www.nextgenss.com/advisories/antispam.txt CONFIRM http://www.sarc.com/avcenter/security/Content/2004.03.19.html BID 9916 XF nas-launchcustomrulewizard-bo(15536) Stack-based buffer overflow in the SymSpamHelper ActiveX component (symspam.dll) in Norton AntiSpam 2004, as used in Norton Internet Security 2004, allows remote attackers to execute arbitrary code via a long parameter to the LaunchCustomRuleWizard method.

cpe:/a:symantec:norton_internet_security:2004 cpe:/a:symantec:norton_internet_security:2004::professional

CVE-2004-0364

2004-04-15T00:00:00.000-04:00

2017-07-10T21:30:06.230-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040319 Norton Internet Security Remote Command Execution (#NISR19042004b) BUGTRAQ 20040319 Ref: NGSSoftware Advisories NISR19042004a and NISR19042004b CERT-VN VU#549054 MISC http://www.nextgenss.com/advisories/nisrce.txt CONFIRM http://www.sarc.com/avcenter/security/Content/2004.03.19.html BID 9915 XF norton-is-launchurl-command-execution(15538) The WrapNISUM ActiveX component (WrapUM.dll) in Norton Internet Security 2004 is marked safe for scripting, which allows remote attackers to execute arbitrary programs via the LaunchURL method.

CVE-2004-0365

2004-05-04T00:00:00.000-04:00

2017-10-10T21:29:24.950-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2004:835 BUGTRAQ 20040329 LNSA-#2004-0007: Multiple security problems in Ethereal BUGTRAQ 20040416 [OpenPKG-SA-2004.015] OpenPKG Security Advisory (ethereal) MLIST [ethereal-dev] 20040318 ethereal radius dissector vulnerability GENTOO GLSA-200403-07 CONFIRM http://www.ethereal.com/appnotes/enpa-sa-00013.html CERT-VN VU#124454 MANDRAKE MDKSA-2004:024 REDHAT RHSA-2004:136 REDHAT RHSA-2004:137 XF ethereal-radius-dos(15571) The dissect_attribute_value_pairs function in packet-radius.c for Ethereal 0.8.13 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a malformed RADIUS packet that triggers a null dereference.

cpe:/a:leon_j_breedt:pam-pgsql:0.5.2

CVE-2004-0366

2004-05-04T00:00:00.000-04:00

2017-07-10T21:30:06.337-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

DEBIAN DSA-469 BID 10266 XF pam-pgsql-sql-injection(15651) SQL injection vulnerability in the libpam-pgsql library before 0.5.2 allows attackers to execute arbitrary SQL statements.

CVE-2004-0367

2004-05-04T00:00:00.000-04:00

2017-10-10T21:29:25.027-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2004:835 BUGTRAQ 20040329 LNSA-#2004-0007: Multiple security problems in Ethereal GENTOO GLSA-200403-07 CONFIRM http://www.ethereal.com/appnotes/enpa-sa-00013.html MLIST [Ethereal-dev] 20040416 Possibly incorrect CVE entry CAN-2004-0367 CERT-VN VU#792286 MANDRAKE MDKSA-2004:024 REDHAT RHSA-2004:136 REDHAT RHSA-2004:137 XF ethereal-zero-presentation-dos(15570) Ethereal 0.10.1 to 0.10.2 allows remote attackers to cause a denial of service (crash) via a zero-length Presentation protocol selector.

cpe:/a:open_group:cde_common_desktop_environment:1.0.1 cpe:/a:open_group:cde_common_desktop_environment:1.0.2 cpe:/a:open_group:cde_common_desktop_environment:1.1 cpe:/a:open_group:cde_common_desktop_environment:1.2 cpe:/a:open_group:cde_common_desktop_environment:2.0 cpe:/a:open_group:cde_common_desktop_environment:2.1 cpe:/a:open_group:cde_common_desktop_environment:2.1.20 cpe:/a:xi_graphics:dextop:2.1 cpe:/a:xi_graphics:dextop:3.0 cpe:/o:ibm:aix:4.3.3 cpe:/o:ibm:aix:5.1 cpe:/o:ibm:aix:5.2

CVE-2004-0368

2004-05-04T00:00:00.000-04:00

2017-10-10T21:29:25.107-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SGI 20040801-01-P VULNWATCH 20040323 how much fun can you have with UDP? MLIST [Dailydave] 20040323 dtlogin advisory SUNALERT 101478 SUNALERT 57539 HP HPSBUX01038 CIAC O-129 MISC http://www.immunitysec.com/downloads/dtlogin.sxw.pdf CERT-VN VU#179804 BID 9958 XF cde-dtlogin-double-free(15581) Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet.

cpe:/a:entrust:entrust_libkmp_isakmp_library cpe:/a:symantec:enterprise_firewall:7.0::solaris cpe:/a:symantec:enterprise_firewall:7.0.4::solaris cpe:/a:symantec:enterprise_firewall:7.0.4::windows_2000_nt cpe:/a:symantec:enterprise_firewall:8.0::solaris cpe:/a:symantec:enterprise_firewall:8.0::windows_2000_nt cpe:/a:symantec:velociraptor:1.5 cpe:/h:symantec:gateway_security_5300:1.0 cpe:/h:symantec:gateway_security_5400:2.0

CVE-2004-0369

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:06.557-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://securityresponse.symantec.com/avcenter/security/Content/2004.08.26.html AUSCERT ESB-2004.0538 CIAC O-206 BID 11039 ISS 20040826 Entrust LibKmp Library Buffer Overflow XF isakmp-spi-size-bo(15669) Buffer overflow in Entrust LibKmp ISAKMP library, as used by Symantec Enterprise Firewall 7.0 through 8.0, Gateway Security 5300 1.0, Gateway Security 5400 2.0, and VelociRaptor 1.5, allows remote attackers to execute arbitrary code via a crafted ISAKMP payload.

cpe:/o:freebsd:freebsd:5.2

CVE-2004-0370

2004-05-04T00:00:00.000-04:00

2017-07-10T21:30:06.603-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FREEBSD FreeBSD-SA-04:06 BID 9992 XF freebsd-ipv6-dos(15662) The setsockopt call in the KAME Project IPv6 implementation, as used in FreeBSD 5.2, does not properly handle certain IPv6 socket options, which could allow attackers to read kernel memory and cause a system panic.

cpe:/a:kth:heimdal:0.4a cpe:/a:kth:heimdal:0.4b cpe:/a:kth:heimdal:0.4c cpe:/a:kth:heimdal:0.4d cpe:/a:kth:heimdal:0.4e cpe:/a:kth:heimdal:0.5 cpe:/a:kth:heimdal:0.5.1 cpe:/a:kth:heimdal:0.5.2 cpe:/a:kth:heimdal:0.6.0

CVE-2004-0371

2004-05-04T00:00:00.000-04:00

2017-07-10T21:30:06.650-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FREEBSD FreeBSD-SA-04:08 OPENBSD 20040530 009: SECURITY FIX: May 30, 2004 GENTOO GLSA-200404-09 DEBIAN DSA-476 CONFIRM http://www.pdc.kth.se/heimdal/advisory/2004-04-01/ XF heimdal-cross-realm-spoofing(15701) Heimdal 0.6.x before 0.6.1 and 0.5.x before 0.5.3 does not properly perform certain consistency checks for cross-realm requests, which allows remote attackers with control of a realm to impersonate others in the cross-realm trust path.

cpe:/a:xine:xine:0.9.13 cpe:/a:xine:xine:1_beta1 cpe:/a:xine:xine:1_beta2 cpe:/a:xine:xine:1_beta3 cpe:/a:xine:xine:1_beta4 cpe:/a:xine:xine:1_beta5 cpe:/a:xine:xine:1_beta6 cpe:/a:xine:xine:1_beta7 cpe:/a:xine:xine:1_beta8 cpe:/a:xine:xine:1_beta9 cpe:/a:xine:xine:1_beta10 cpe:/a:xine:xine:1_beta11 cpe:/a:xine:xine:1_beta12 cpe:/a:xine:xine:1_rc0a cpe:/a:xine:xine:1_rc1 cpe:/a:xine:xine:1_rc2 cpe:/a:xine:xine:1_rc3 cpe:/a:xine:xine:1_rc3a cpe:/a:xine:xine:1_rc3b

CVE-2004-0372

2004-04-15T00:00:00.000-04:00

2017-07-10T21:30:06.697-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040320 xine-check/xine-bugreport symlink vulnerability. GENTOO GLSA-200404-20 DEBIAN DSA-477 BID 9939 XF xine-xinebugreport-xinecheck-symlink(15564) xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the (1) xine-bugreport or (2) xine-check scripts.

cpe:/a:interchange_development_group:interchange:4.8.1 cpe:/a:interchange_development_group:interchange:4.8.2 cpe:/a:interchange_development_group:interchange:4.8.3 cpe:/a:interchange_development_group:interchange:4.8.4 cpe:/a:interchange_development_group:interchange:4.8.5 cpe:/a:interchange_development_group:interchange:4.8.6 cpe:/a:interchange_development_group:interchange:4.8.7 cpe:/a:interchange_development_group:interchange:4.8.8 cpe:/a:interchange_development_group:interchange:4.8.9 cpe:/a:interchange_development_group:interchange:5.0

CVE-2004-0374

2004-05-04T00:00:00.000-04:00

2017-07-10T21:30:06.760-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://ftp.icdevgroup.org/interchange/5.0/WHATSNEW DEBIAN DSA-471 MLIST [interchange-announce] 20040329 Security Problem in Interchange BID 10005 XF interchange-url-obtain-information(15670) Interchange before 5.0.1 allows remote attackers to "expose the content of arbitrary variables" and read or modify sensitive SQL information via an HTTP request ending with the "__SQLUSER__" string.

CVE-2004-0375

2004-08-18T00:00:00.000-04:00

2017-07-10T21:30:06.840-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040423 EEYE: Symantec Multiple Firewall TCP Options Denial of Service SECTRACK 1009379 SECTRACK 1009380 MISC http://www.eeye.com/html/Research/Upcoming/20040309.html BID 9912 CONFIRM http://www.symantec.com/avcenter/security/Content/2004.04.20.html XF norton-firewalls-dos(15433) XF symantec-firewall-tcp-dos(15936) SYMNDIS.SYS in Symantec Norton Internet Security 2003 and 2004, Norton Personal Firewall 2003 and 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 and 1.1 allow remote attackers to cause a denial of service (infinite loop) via a TCP packet with (1) SACK option or (2) Alternate Checksum Data option followed by a length of zero.

cpe:/a:oftpd:oftpd:0.3.6

CVE-2004-0376

2004-05-04T00:00:00.000-04:00

2017-07-10T21:30:06.900-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov GENTOO GLSA-200403-08 DEBIAN DSA-473 BID 9980 CONFIRM http://www.time-travellers.org/oftpd/oftpd-dos.html XF oftpd-port-dos(15622) oftpd 0.3.6 and earlier allows remote attackers to cause a denial of service (crash) via a PORT command with a large value.

cpe:/a:activestate:activeperl cpe:/a:larry_wall:perl:5.8.3

CVE-2004-0377

2004-05-04T00:00:00.000-04:00

2017-07-10T21:30:06.947-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20040405 iDEFENSE Security Advisory 04.05.04: Perl win32_stat Function BUGTRAQ 20040405 [Full-Disclosure] iDEFENSE Security Advisory 04.05.04: Perl win32_stat Function CONFIRM http://public.activestate.com/cgi-bin/perlbrowse?patch=22552 MISC http://www.idefense.com/application/poi/display?id=93&type=vulnerabilities CERT-VN VU#722414 XF perl-win32stat-bo(15732) Buffer overflow in the win32_stat function for (1) ActiveState's ActivePerl and (2) Larry Wall's Perl before 5.8.3 allows local or remote attackers to execute arbitrary commands via filenames that end in a backslash character.

CVE-2004-0378

2017-05-11T10:29:01.637-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

cpe:/a:microsoft:sharepoint_portal_server:2001 cpe:/a:microsoft:sharepoint_portal_server:2001:sp1 cpe:/a:microsoft:sharepoint_portal_server:2001:sp2 cpe:/a:microsoft:sharepoint_portal_server:2001:sp2a

CVE-2004-0379

2004-05-04T00:00:00.000-04:00

2017-07-10T21:30:06.997-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20040405 Multiple XSS vulnerabilities in Microsoft SharePoint Portal Server 2001 XF sharepoint-portal-xss(15729) Multiple cross-site scripting (XSS) vulnerabilities in Microsoft SharePoint Portal Server 2001 allow remote attackers to process arbitrary web content and steal cookies via certain server scripts.

cpe:/a:microsoft:outlook_express:5.5 cpe:/a:microsoft:outlook_express:6.0

CVE-2004-0380

2004-05-04T00:00:00.000-04:00

2018-10-12T17:34:33.527-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CERT-VN VU#323070 MISC http://www.k-otik.net/bugtraq/02.18.InternetExplorer.php BUGTRAQ 20040219 Microsoft Internet Explorer Unspecified CHM File Processing Arbitrary Code Execution Vulnerability (bid 9658) BUGTRAQ 20040328 IE ms-its: and mk:@MSITStore: vulnerability BID 9105 BID 9658 CERT TA04-104A MS MS04-013 XF outlook-mhtml-execute-code(15705) The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the InfoTech Storage (ITS) protocol handlers such as (1) ms-its, (2) ms-itss, (3) its, or (4) mk:@MSITStore, aka the "MHTML URL Processing Vulnerability."

cpe:/a:mysql:mysql:4.1.0:alpha cpe:/a:mysql:mysql:4.1.0.0 cpe:/a:oracle:mysql:3.20.32a cpe:/a:oracle:mysql:3.22.26 cpe:/a:oracle:mysql:3.22.27 cpe:/a:oracle:mysql:3.22.28 cpe:/a:oracle:mysql:3.22.29 cpe:/a:oracle:mysql:3.22.30 cpe:/a:oracle:mysql:3.22.32 cpe:/a:oracle:mysql:3.23.2 cpe:/a:oracle:mysql:3.23.3 cpe:/a:oracle:mysql:3.23.5 cpe:/a:oracle:mysql:3.23.8 cpe:/a:oracle:mysql:3.23.9 cpe:/a:oracle:mysql:3.23.10 cpe:/a:oracle:mysql:3.23.22 cpe:/a:oracle:mysql:3.23.23 cpe:/a:oracle:mysql:3.23.24 cpe:/a:oracle:mysql:3.23.25 cpe:/a:oracle:mysql:3.23.26 cpe:/a:oracle:mysql:3.23.27 cpe:/a:oracle:mysql:3.23.28 cpe:/a:oracle:mysql:3.23.28:gamma cpe:/a:oracle:mysql:3.23.29 cpe:/a:oracle:mysql:3.23.30 cpe:/a:oracle:mysql:3.23.31 cpe:/a:oracle:mysql:3.23.32 cpe:/a:oracle:mysql:3.23.33 cpe:/a:oracle:mysql:3.23.34 cpe:/a:oracle:mysql:3.23.36 cpe:/a:oracle:mysql:3.23.37 cpe:/a:oracle:mysql:3.23.38 cpe:/a:oracle:mysql:3.23.39 cpe:/a:oracle:mysql:3.23.40 cpe:/a:oracle:mysql:3.23.41 cpe:/a:oracle:mysql:3.23.42 cpe:/a:oracle:mysql:3.23.43 cpe:/a:oracle:mysql:3.23.44 cpe:/a:oracle:mysql:3.23.45 cpe:/a:oracle:mysql:3.23.46 cpe:/a:oracle:mysql:3.23.47 cpe:/a:oracle:mysql:3.23.48 cpe:/a:oracle:mysql:3.23.49 cpe:/a:oracle:mysql:3.23.50 cpe:/a:oracle:mysql:3.23.51 cpe:/a:oracle:mysql:3.23.52 cpe:/a:oracle:mysql:3.23.53 cpe:/a:oracle:mysql:3.23.53a cpe:/a:oracle:mysql:3.23.54 cpe:/a:oracle:mysql:3.23.54a cpe:/a:oracle:mysql:3.23.55 cpe:/a:oracle:mysql:3.23.56 cpe:/a:oracle:mysql:3.23.58 cpe:/a:oracle:mysql:4.0.0 cpe:/a:oracle:mysql:4.0.1 cpe:/a:oracle:mysql:4.0.2 cpe:/a:oracle:mysql:4.0.3 cpe:/a:oracle:mysql:4.0.4 cpe:/a:oracle:mysql:4.0.5 cpe:/a:oracle:mysql:4.0.5a cpe:/a:oracle:mysql:4.0.6 cpe:/a:oracle:mysql:4.0.7 cpe:/a:oracle:mysql:4.0.7:gamma cpe:/a:oracle:mysql:4.0.8 cpe:/a:oracle:mysql:4.0.8:gamma cpe:/a:oracle:mysql:4.0.9 cpe:/a:oracle:mysql:4.0.9:gamma cpe:/a:oracle:mysql:4.0.10 cpe:/a:oracle:mysql:4.0.11 cpe:/a:oracle:mysql:4.0.11:gamma cpe:/a:oracle:mysql:4.0.12 cpe:/a:oracle:mysql:4.0.13 cpe:/a:oracle:mysql:4.0.14 cpe:/a:oracle:mysql:4.0.15 cpe:/a:oracle:mysql:4.0.18

CVE-2004-0381

2004-05-04T00:00:00.000-04:00

2019-10-07T12:42:32.200-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040324 mysqlbug tmpfile/symlink vulnerability. BUGTRAQ 20040414 [OpenPKG-SA-2004.014] OpenPKG Security Advisory (mysql) GENTOO GLSA-200405-20 CIAC P-018 DEBIAN DSA-483 MANDRAKE MDKSA-2004:034 REDHAT RHSA-2004:569 REDHAT RHSA-2004:597 BID 9976 XF mysql-mysqlbug-symlink(15617) mysqlbug in MySQL allows local users to overwrite arbitrary files via a symlink attack on the failed-mysql-bugreport temporary file.

cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3.3

CVE-2004-0382

2004-05-04T00:00:00.000-04:00

2017-07-10T21:30:07.167-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=61798 CONFIRM http://lists.apple.com/mhonarc/security-announce/msg00047.html XF macos-cups-configuration-unknown(15769) Unknown vulnerability in the CUPS printing system in Mac OS X 10.3.3 and Mac OS X 10.2.8 with unknown impact, possibly related to a configuration file setting.

cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3.3

CVE-2004-0383

2004-05-04T00:00:00.000-04:00

2017-07-10T21:30:07.213-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=61798 CONFIRM http://lists.apple.com/mhonarc/security-announce/msg00047.html XF macos-mail-unknown(15768) Unknown vulnerability in Mail for Mac OS X 10.3.3 and 10.2.8, with unknown impact, related to "the handling of HTML-formatted email."

cpe:/a:oracle:application_server_web_cache:9.0.0.4.0 cpe:/a:oracle:application_server_web_cache:9.0.2.3.0 cpe:/a:oracle:application_server_web_cache:9.0.3.1.0 cpe:/a:oracle:application_server_web_cache:9.0.4.0.0 cpe:/a:oracle:e-business_suite:11i

CVE-2004-0385

2004-06-01T00:00:00.000-04:00

2017-07-10T21:30:07.277-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

VULNWATCH 20040408 Heap Overflow in Oracle 9iAS / 10g Application Server Web Cache BUGTRAQ 20040316 new security alert #66 issued in Oracle web cache BUGTRAQ 20040408 Heap Overflow in Oracle 9iAS / 10g Application Server Web Cache CONFIRM http://otn.oracle.com/deploy/security/pdf/2004alert66.pdf MISC http://www.inaccessnetworks.com/ian/services/secadv01.txt CERT-VN VU#413006 BID 9868 XF oracle-web-cache-vulnerabilities(15463) Heap-based buffer overflow in Oracle 9i Application Server Web Cache 9.0.4.0.0, 9.0.3.1.0, 9.0.2.3.0, and 9.0.0.4.0 allows remote attackers to execute arbitrary code via a long HTTP request method header to the Web Cache listener. NOTE: due to the vagueness of the Oracle advisory, it is not clear whether there are additional issues besides this overflow, although the advisory alludes to multiple "vulnerabilities."

cpe:/a:mplayer:mplayer:0.90 cpe:/a:mplayer:mplayer:0.90_pre cpe:/a:mplayer:mplayer:0.90_rc cpe:/a:mplayer:mplayer:0.91 cpe:/a:mplayer:mplayer:1.0_pre1 cpe:/a:mplayer:mplayer:1.0_pre2 cpe:/a:mplayer:mplayer:1.0_pre3 cpe:/o:gentoo:linux:0.5 cpe:/o:gentoo:linux:0.7 cpe:/o:gentoo:linux:1.1a cpe:/o:gentoo:linux:1.2 cpe:/o:gentoo:linux:1.4 cpe:/o:gentoo:linux:1.4:rc1 cpe:/o:gentoo:linux:1.4:rc2 cpe:/o:gentoo:linux:1.4:rc3 cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:10.0

CVE-2004-0386

2004-05-04T00:00:00.000-04:00

2017-07-10T21:30:07.337-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040330 MPlayer Security Advisory #002 - HTTP parsing vulnerability GENTOO GLSA-200403-13 CERT-VN VU#723910 MANDRAKE MDKSA-2004:026 CONFIRM http://www.mplayerhq.hu/homepage/design6/news.html BUGTRAQ 20040330 Heap overflow in MPlayer BID 10008 XF mplayer-header-bo(15675) Buffer overflow in the HTTP parser for MPlayer 1.0pre3 and earlier, 0.90, and 0.91 allows remote attackers to execute arbitrary code via a long Location header.

cpe:/a:realnetworks:realone_player cpe:/a:realnetworks:realone_player:::enterprise cpe:/a:realnetworks:realone_player:10_beta cpe:/a:realnetworks:realplayer:8.0

CVE-2004-0387

2004-06-01T00:00:00.000-04:00

2017-07-10T21:30:07.387-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

VULNWATCH 20040307 REAL One Player R3T File Format Stack Overflow BUGTRAQ 20040307 REAL One Player R3T File Format Stack Overflow MISC http://www.ngssoftware.com/advisories/realr3t.txt BID 10070 CONFIRM http://www.service.real.com/help/faq/security/040406_r3t/en/ XF realplayer-r3t-bo(15774) Stack-based buffer overflow in the RT3 plugin, as used in RealPlayer 8, RealOne Player, RealOne Player 10 beta, and RealOne Player Enterprise, allows remote attackers to execute arbitrary code via a malformed .R3T file.

cpe:/a:mysql:mysql:5.0.33

CVE-2004-0388

2004-06-01T00:00:00.000-04:00

2017-10-10T21:29:25.230-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://dev.mysql.com/doc/mysql/en/news-4-1-2.html BUGTRAQ 20040414 [OpenPKG-SA-2004.014] OpenPKG Security Advisory (mysql) GENTOO GLSA-200405-20 SECTRACK 1009784 CIAC P-018 DEBIAN DSA-483 MANDRAKE MDKSA-2004:034 REDHAT RHSA-2004:569 REDHAT RHSA-2004:597 BID 10142 XF mysql-mysqldmulti-symlink(15883) The mysqld_multi script in MySQL allows local users to overwrite arbitrary files via a symlink attack.

cpe:/a:realnetworks:helix_universal_server:9.0.1 cpe:/a:realnetworks:helix_universal_server:9.0.2

CVE-2004-0389

2004-06-01T00:00:00.000-04:00

2017-07-10T21:30:07.497-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov IDEFENSE 20040415 RealNetworks Helix Universal Server Denial of Service Vulnerability BID 10157 XF helix-get-dos(15880) RealNetworks Helix Universal Server 9.0.1 and 9.0.2 allows remote attackers to cause a denial of service (crash) via malformed requests that trigger a null dereference, as demonstrated using (1) GET_PARAMETER or (2) DESCRIBE requests.

cpe:/o:sco:openserver:5.0.5 cpe:/o:sco:openserver:5.0.6 cpe:/o:sco:openserver:5.0.7

CVE-2004-0390

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:07.543-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20040510 OpenServer 5.0.5 OpenServer 5.0.6 OpenServer 5.0.7 : X sessions which are not started by scologin cannot use the X authorization protocol SCO SCOSA-2004.5 XF openserver-x-session-insecure(16113) SCO OpenServer 5.0.5 through 5.0.7 only supports Xauthority style access control when users log in using scologin, which allows remote attackers to gain unauthorized access to an X session via other X login methods.

cpe:/a:cisco:wireless_lan_solution_engine:2.0 cpe:/a:cisco:wireless_lan_solution_engine:2.1 cpe:/a:cisco:wireless_lan_solution_engine:2.2 cpe:/a:cisco:wireless_lan_solution_engine:2.3 cpe:/a:cisco:wireless_lan_solution_engine:2.4 cpe:/a:cisco:wireless_lan_solution_engine:2.5 cpe:/h:cisco:hosting_solution_engine:1.7 cpe:/h:cisco:hosting_solution_engine:1.7.0 cpe:/h:cisco:hosting_solution_engine:1.7.1 cpe:/h:cisco:hosting_solution_engine:1.7.2 cpe:/h:cisco:hosting_solution_engine:1.7.3

CVE-2004-0391

2004-06-01T00:00:00.000-04:00

2017-07-10T21:30:07.603-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CIAC O-111 CISCO 20040407 A Default Username and Password in WLSE and HSE Devices CERT-VN VU#659228 BID 10076 XF cisco-default-password(15773) Cisco Wireless LAN Solution Engine (WLSE) 2.0 through 2.5 and Hosting Solution Engine (HSE) 1.7 through 1.7.3 have a hardcoded username and password, which allows remote attackers to add new users, modify existing users, and change configuration.

cpe:/a:kame:racoon:2004-04-07a

CVE-2004-0392

2004-06-14T00:00:00.000-04:00

2017-07-10T21:30:07.667-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SCO SCOSA-2005.10 CONFIRM http://orange.kame.net/dev/query-pr.cgi?pr=555 CONFIRM http://www.vuxml.org/freebsd/40fcf20f-8891-11d8-90d1-0020ed76ef5a.html XF racoon-isakmp-dos(15893) racoon before 20040407b allows remote attackers to cause a denial of service (infinite loop and dropped connections) via an IKE message with a malformed Generic Payload Header containing invalid (1) "Security Association Next Payload" and (2) "RESERVED" fields.

cpe:/a:rlpr:rlpr:2.0 cpe:/a:rlpr:rlpr:2.0.1 cpe:/a:rlpr:rlpr:2.0.2 cpe:/a:rlpr:rlpr:2.0.3 cpe:/a:rlpr:rlpr:2.0.4

CVE-2004-0393

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:07.713-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040624 Rlpr Advisory DEBIAN DSA-524 BID 10578 XF rlpr-msg-format-string(16453) Format string vulnerability in the msg function for rlpr daemon (rlprd) 2.0.4 allows remote attackers to execute arbitrary code via format string specifiers in a buffer that can not be resolved, which is provided to the syslog function.

cpe:/o:linux:linux_kernel:2.6.20.1

CVE-2004-0394

2004-08-18T00:00:00.000-04:00

2017-07-10T21:30:07.777-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SGI 20040504-01-U SGI 20040505-01-U CONECTIVA CLA-2004:846 MLIST [fedora-announce] 20040422 Fedora alert FEDORA-2004-111 (kernel) GENTOO GLSA-200407-02 DEBIAN DSA-1067 DEBIAN DSA-1069 DEBIAN DSA-1070 DEBIAN DSA-1082 ENGARDE ESA-20040428-004 MANDRAKE MDKSA-2004:037 SUSE SuSE-SA:2004:010 BID 10233 XF linux-panic-bo(15953) A "potential" buffer overflow exists in the panic() function in Linux 2.4.x, although it may not be exploitable due to the functionality of panic.

cpe:/a:gatos:gatos:.5

CVE-2004-0395

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:07.837-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

DEBIAN DSA-509 BID 10437 XF gatos-xatitv-gain-privileges(16273) The xatitv program in the gatos package does not properly drop root privileges when the configuration file does not exist, which allows local users to execute arbitrary commands via shell metacharacters in a system call.

cpe:/a:cvs:cvs:1.11 cpe:/a:cvs:cvs:1.12

CVE-2004-0396

2004-06-14T00:00:00.000-04:00

2017-10-10T21:29:25.340-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FREEBSD FreeBSD-SA-04:10 NETBSD NetBSD-SA2004-008 FULLDISC 20040519 Advisory 07/2004: CVS remote vulnerability BUGTRAQ 20040519 Advisory 07/2004: CVS remote vulnerability SUSE SuSE-SA:2004:013 BUGTRAQ 20040519 Advisory 07/2004: CVS remote vulnerability BUGTRAQ 20040519 [OpenPKG-SA-2004.022] OpenPKG Security Advisory (cvs) FEDORA FEDORA-2004-1620 OPENBSD 20040520 cvs server buffer overflow vulnerability MISC http://security.e-matters.de/advisories/072004.html GENTOO GLSA-200405-12 CIAC O-147 DEBIAN DSA-505 CERT-VN VU#192038 MANDRAKE MDKSA-2004:048 REDHAT RHSA-2004:190 BID 10384 SLACKWARE SSA:2004-140-01 CERT TA04-147A XF cvs-entry-line-bo(16193) Heap-based buffer overflow in CVS 1.11.x up to 1.11.15, and 1.12.x up to 1.12.7, when using the pserver mechanism allows remote attackers to execute arbitrary code via Entry lines.

cpe:/a:subversion:subversion:1.0 cpe:/a:subversion:subversion:1.0.1 cpe:/a:subversion:subversion:1.0.2

CVE-2004-0397

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:07.980-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20040519 Advisory 08/2004: Subversion remote vulnerability BUGTRAQ 20040519 Advisory 08/2004: Subversion remote vulnerability MISC http://security.e-matters.de/advisories/082004.html CONFIRM http://subversion.tigris.org/svn-sscanf-advisory.txt GENTOO GLSA-200405-14 FEDORA FEDORA-2004-128 BUGTRAQ 20040519 [OpenPKG-SA-2004.023] OpenPKG Security Advisory (subversion) BID 10386 FEDORA FLSA:1748 XF subversion-date-parsing-command-execution(16191) Stack-based buffer overflow during the apr_time_t data conversion in Subversion 1.0.2 and earlier allows remote attackers to execute arbitrary code via a (1) DAV2 REPORT query or (2) get-dated-rev svn-protocol command.

CVE-2004-0398

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:08.043-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

FULLDISC 20040519 Advisory 06/2004: libneon date parsing vulnerability CONECTIVA CLA-2004:841 BUGTRAQ 20040519 Advisory 06/2004: libneon date parsing vulnerability BUGTRAQ 20040519 [OpenPKG-SA-2004.024] OpenPKG Security Advisory (neon) GENTOO GLSA-200405-13 GENTOO GLSA-200405-15 CIAC O-148 DEBIAN DSA-506 DEBIAN DSA-507 MANDRAKE MDKSA-2004:049 REDHAT RHSA-2004:191 BID 10385 FEDORA FEDORA-2004-1552 XF neon-library-nerfc1036parse-bo(16192) Heap-based buffer overflow in the ne_rfc1036_parse date parsing function for the neon library (libneon) 0.24.5 and earlier, as used by cadaver before 0.22, allows remote WebDAV servers to execute arbitrary code on the client.

cpe:/a:university_of_cambridge:exim cpe:/a:university_of_cambridge:exim:3.35

CVE-2004-0399

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:08.087-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20040506 Buffer overflows in exim, yet still exim much better than windows DEBIAN DSA-501 DEBIAN DSA-502 MISC http://www.guninski.com/exim1.html XF exim-requireverify-bo(16079) Stack-based buffer overflow in Exim 3.35, and other versions before 4, when the sender_verify option is true, allows remote attackers to cause a denial of service and possibly execute arbitrary code during sender verification.

cpe:/a:university_of_cambridge:exim:4.32

CVE-2004-0400

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:08.150-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20040506 Buffer overflows in exim, yet still exim much better than windows DEBIAN DSA-501 DEBIAN DSA-502 MISC http://www.guninski.com/exim1.html XF exim-headerschecksyntax-bo(16077) Stack-based buffer overflow in Exim 4 before 4.33, when the headers_check_syntax option is enabled, allows remote attackers to cause a denial of service and possibly execute arbitrary code during the header check.

cpe:/a:free_software_foundation_inc.:libtasn1:0.1 cpe:/a:free_software_foundation_inc.:libtasn1:0.1.0 cpe:/a:free_software_foundation_inc.:libtasn1:0.1.1 cpe:/a:free_software_foundation_inc.:libtasn1:0.2.0 cpe:/a:free_software_foundation_inc.:libtasn1:0.2.1 cpe:/a:free_software_foundation_inc.:libtasn1:0.2.2 cpe:/a:free_software_foundation_inc.:libtasn1:0.2.3 cpe:/a:free_software_foundation_inc.:libtasn1:0.2.4 cpe:/a:free_software_foundation_inc.:libtasn1:0.2.5 cpe:/a:free_software_foundation_inc.:libtasn1:0.2.6

CVE-2004-0401

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:08.230-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONFIRM http://packages.debian.org/changelogs/pool/main/libt/libtasn1-2/libtasn1-2_0.2.13-1/changelog SECTRACK 1010159 MISC http://www.backports.org/changelog.html BID 10360 XF libtasn1-der-parsing(16157) Unknown vulnerability in libtasn1 0.1.x before 0.1.2, and 0.2.x before 0.2.7, related to the DER parsing functions.

cpe:/a:xpcd:xpcd:2.08 cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:9.2::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64

CVE-2004-0402

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:08.277-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

DEBIAN DSA-508 MANDRAKE MDKSA-2004:053 BID 10403 XF xpcd-svga-pcdopen-bo(16236) Buffer overflow in xpcd-svga in xpcd before 2.08, and possibly other versions, may allow local users to execute arbitrary code.

cpe:/a:kame:racoon:2004-04-08a

CVE-2004-0403

2004-06-01T00:00:00.000-04:00

2017-10-10T21:29:25.417-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SCO SCOSA-2005.10 SGI 20040506-01-U APPLE APPLE-SA-2004-05-03 GENTOO GLSA-200404-17 SECTRACK 1009937 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=232288 CONFIRM http://www.kame.net/dev/cvsweb2.cgi/kame/kame/kame/racoon/isakmp.c.diff?r1=1.180&r2=1.181 MANDRAKE MDKSA-2004:069 REDHAT RHSA-2004:165 BID 10172 CONFIRM http://www.vuxml.org/freebsd/ccd698df-8e20-11d8-90d1-0020ed76ef5a.html XF racoon-isakmp-dos(15893) Racoon before 20040408a allows remote attackers to cause a denial of service (memory consumption) via an ISAKMP packet with a large length field.

cpe:/a:psionic:logcheck:1.1.0

CVE-2004-0404

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:08.387-04:00

1.2

LOCAL

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov DEBIAN DSA-488 MANDRAKE MDKSA-2004:155 BID 10162 XF logcheck-directory-symlink(15888) logcheck before 1.1.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary directory in /var/tmp.

cpe:/a:cvs:cvs:1.10

CVE-2004-0405

2004-06-01T00:00:00.000-04:00

2017-10-10T21:29:25.480-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FREEBSD FreeBSD-SA-04:07 SGI 20040404-01-U FEDORA FEDORA-2004-1620 GENTOO GLSA-200404-13 DEBIAN DSA-486 SLACKWARE SSA:2004-108-02 XF cvs-dotdot-directory-traversal(15891) CVS before 1.11 allows CVS clients to read arbitrary files via .. (dot dot) sequences in filenames via CVS client requests, a different vulnerability than CVE-2004-0180.

CVE-2004-0406

2017-05-11T10:29:01.650-04:00

2017-05-11T10:29:01.667-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

cpe:/a:macromedia:coldfusion:6.1

CVE-2004-0407

2004-06-01T00:00:00.000-04:00

2017-07-10T21:30:08.497-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040416 [securityzone@macromedia.com: New Macromedia Security Zone Bulletin Posted] SECTRACK 1009825 CONFIRM http://www.macromedia.com/devnet/security/security_zone/mpsb04-06.html BID 10158 XF coldfusion-upload-file-dos(15882) The HTML form upload capability in ColdFusion MX 6.1 does not reclaim disk space if an upload is interrupted, which allows remote attackers to cause a denial of service (disk consumption) by repeatedly uploading files and interrupting the uploads before they finish.

cpe:/a:michael_bacarella:ident2:.999c cpe:/a:michael_bacarella:ident2:1.3 cpe:/a:michael_bacarella:ident2:1.3_1 cpe:/a:michael_bacarella:ident2:1.4

CVE-2004-0408

2004-09-28T00:00:00.000-04:00

2017-07-10T21:30:08.543-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

DEBIAN DSA-494 BID 10192 XF ident2-childservice-bo(15938) Buffer overflow in the child_service function in the ident2 ident daemon allows remote attackers to execute arbitrary code.

cpe:/a:xchat:xchat:1.8.0 cpe:/a:xchat:xchat:1.8.1 cpe:/a:xchat:xchat:1.8.2 cpe:/a:xchat:xchat:1.8.3 cpe:/a:xchat:xchat:1.8.4 cpe:/a:xchat:xchat:1.8.5 cpe:/a:xchat:xchat:1.8.6 cpe:/a:xchat:xchat:1.8.7 cpe:/a:xchat:xchat:1.8.8 cpe:/a:xchat:xchat:1.8.9 cpe:/a:xchat:xchat:1.9.0 cpe:/a:xchat:xchat:1.9.1 cpe:/a:xchat:xchat:1.9.2 cpe:/a:xchat:xchat:1.9.3 cpe:/a:xchat:xchat:1.9.4 cpe:/a:xchat:xchat:1.9.5 cpe:/a:xchat:xchat:1.9.6 cpe:/a:xchat:xchat:1.9.7 cpe:/a:xchat:xchat:1.9.8 cpe:/a:xchat:xchat:1.9.9 cpe:/a:xchat:xchat:2.0.0 cpe:/a:xchat:xchat:2.0.1 cpe:/a:xchat:xchat:2.0.2 cpe:/a:xchat:xchat:2.0.3 cpe:/a:xchat:xchat:2.0.4 cpe:/a:xchat:xchat:2.0.5 cpe:/a:xchat:xchat:2.0.6 cpe:/a:xchat:xchat:2.0.7 cpe:/a:xchat:xchat:2.0.8

CVE-2004-0409

2004-06-01T00:00:00.000-04:00

2017-10-10T21:29:25.560-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

MLIST [xchat-announce] 20040405 xchat 2.0.x Socks5 Vulnerability GENTOO GLSA-200404-15 FEDORA FLSA:123013 REDHAT RHSA-2004:177 REDHAT RHSA-2004:585 CONFIRM http://www.xchat.org/ DEBIAN DSA-493 Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled, allows remote attackers to execute arbitrary code.

CVE-2004-0410

2004-12-31T00:00:00.000-05:00

2008-09-10T15:26:17.930-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

cpe:/a:kde:konqueror:3.2.2 cpe:/a:opera_software:opera_web_browser:9.10

CVE-2004-0411

2004-07-07T00:00:00.000-04:00

2017-10-10T21:29:25.637-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONECTIVA CLA-2004:843 BUGTRAQ 20040517 KDE Security Advisory: URI Handler Vulnerabilities GENTOO GLSA-200405-11 CIAC O-146 DEBIAN DSA-518 CONFIRM http://www.kde.org/info/security/advisory-20040517-1.txt SUSE SuSE-SA:2003:014 REDHAT RHSA-2004:222 FEDORA FEDORA-2004-121 FEDORA FEDORA-2004-122 BUGTRAQ 20040513 Opera Telnet URI Handler Vulnerability also applies to other browsers BID 10358 SLACKWARE SSA:2004-238 XF kde-url-handler-gain-access(16163) The URI handlers in Konqueror for KDE 3.2.2 and earlier do not properly filter "-" characters that begin a hostname in a (1) telnet, (2) rlogin, (3) ssh, or (4) mailto URI, which allows remote attackers to manipulate the options that are passed to the associated programs, possibly to read arbitrary files or execute arbitrary code.

cpe:/a:gnu:mailman:2.1 cpe:/a:gnu:mailman:2.1.1 cpe:/a:gnu:mailman:2.1.2 cpe:/a:gnu:mailman:2.1.3 cpe:/a:gnu:mailman:2.1.4 cpe:/a:gnu:mailman:2.1b1

CVE-2004-0412

2004-08-18T00:00:00.000-04:00

2017-07-10T21:30:08.667-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONECTIVA CLA-2004:842 MLIST [Mailman-Announce] 20040515 RELEASED Mailman 2.1.5 FEDORA FEDORA-2004-1734 GENTOO GLSA-200406-04 MANDRAKE MDKSA-2004:051 BID 10412 CONFIRM https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=123559 XF mailman-obtain-password(16256) Mailman before 2.1.5 allows remote attackers to obtain user passwords via a crafted email request to the Mailman server.

cpe:/a:openpkg:openpkg cpe:/a:openpkg:openpkg:2.0 cpe:/a:subversion:subversion:1.0 cpe:/a:subversion:subversion:1.0.1 cpe:/a:subversion:subversion:1.0.2 cpe:/a:subversion:subversion:1.0.3 cpe:/a:subversion:subversion:1.0.4

CVE-2004-0413

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:08.713-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://subversion.tigris.org/security/CAN-2004-0413-advisory.txt GENTOO GLSA-200406-07 SUSE SuSE-SA:2004:018 FEDORA FEDORA-2004-165 BUGTRAQ 20041012 [FMADV] Subversion <= 1.04 Heap Overflow BID 10519 FEDORA FLSA:1748 XF subversion-svn-bo(16396) libsvn_ra_svn in Subversion 1.0.4 trusts the length field of (1) svn://, (2) svn+ssh://, and (3) other svn protocol URL strings, which allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via an integer overflow that leads to a heap-based buffer overflow.

cpe:/a:cvs:cvs:1.10.7 cpe:/a:cvs:cvs:1.10.8 cpe:/a:cvs:cvs:1.11 cpe:/a:cvs:cvs:1.11.1 cpe:/a:cvs:cvs:1.11.1_p1 cpe:/a:cvs:cvs:1.11.2 cpe:/a:cvs:cvs:1.11.3 cpe:/a:cvs:cvs:1.11.4 cpe:/a:cvs:cvs:1.11.5 cpe:/a:cvs:cvs:1.11.6 cpe:/a:cvs:cvs:1.11.10 cpe:/a:cvs:cvs:1.11.11 cpe:/a:cvs:cvs:1.11.14 cpe:/a:cvs:cvs:1.11.15 cpe:/a:cvs:cvs:1.11.16 cpe:/a:cvs:cvs:1.12.1 cpe:/a:cvs:cvs:1.12.2 cpe:/a:cvs:cvs:1.12.5 cpe:/a:cvs:cvs:1.12.7 cpe:/a:cvs:cvs:1.12.8 cpe:/a:openpkg:openpkg cpe:/a:openpkg:openpkg:1.3 cpe:/a:openpkg:openpkg:2.0 cpe:/a:sgi:propack:2.4 cpe:/a:sgi:propack:3.0 cpe:/o:gentoo:linux:1.4 cpe:/o:openbsd:openbsd cpe:/o:openbsd:openbsd:3.4 cpe:/o:openbsd:openbsd:3.5

CVE-2004-0414

2004-08-06T00:00:00.000-04:00

2018-05-02T21:29:24.833-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SGI 20040604-01-U SGI 20040605-01-U FULLDISC 20040609 Advisory 09/2004: More CVS remote vulnerabilities BUGTRAQ 20040611 [OpenPKG-SA-2004.027] OpenPKG Security Advisory (cvs) MISC http://security.e-matters.de/advisories/092004.html GENTOO GLSA-200406-06 DEBIAN DSA-517 MANDRAKE MDKSA-2004:058 REDHAT RHSA-2004:233 CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle malformed "Entry" lines, which prevents a NULL terminator from being used and may lead to a denial of service (crash), modification of critical program data, or arbitrary code execution.

CVE-2004-0415

2004-11-23T00:00:00.000-05:00

2017-10-10T21:29:25.717-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SGI 20040804-01-U CONECTIVA CLA-2004:879 GENTOO GLSA-200408-24 MANDRAKE MDKSA-2004:087 REDHAT RHSA-2004:413 REDHAT RHSA-2004:418 XF linux-pointer-info-disclosure(16877) Linux kernel does not properly convert 64-bit file offset pointers to 32 bits, which allows local users to access portions of kernel memory.

CVE-2004-0416

2004-08-06T00:00:00.000-04:00

2018-05-02T21:29:25.007-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SGI 20040604-01-U SGI 20040605-01-U FULLDISC 20040609 Advisory 09/2004: More CVS remote vulnerabilities BUGTRAQ 20040611 [OpenPKG-SA-2004.027] OpenPKG Security Advisory (cvs) MISC http://security.e-matters.de/advisories/092004.html GENTOO GLSA-200406-06 DEBIAN DSA-519 MANDRAKE MDKSA-2004:058 REDHAT RHSA-2004:233 Double free vulnerability for the error_prog_name string in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to execute arbitrary code.

CVE-2004-0417

2004-08-06T00:00:00.000-04:00

2018-05-02T21:29:25.117-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SGI 20040605-01-U FULLDISC 20040609 Advisory 09/2004: More CVS remote vulnerabilities BUGTRAQ 20040611 [OpenPKG-SA-2004.027] OpenPKG Security Advisory (cvs) MISC http://security.e-matters.de/advisories/092004.html GENTOO GLSA-200406-06 DEBIAN DSA-519 MANDRAKE MDKSA-2004:058 REDHAT RHSA-2004:233 Integer overflow in the "Max-dotdot" CVS protocol command (serve_max_dotdot) for CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, may allow remote attackers to cause a server crash, which could cause temporary data to remain undeleted and consume disk space.

CVE-2004-0418

2004-08-06T00:00:00.000-04:00

2018-05-02T21:29:25.240-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SGI 20040604-01-U SGI 20040605-01-U FULLDISC 20040609 Advisory 09/2004: More CVS remote vulnerabilities BUGTRAQ 20040611 [OpenPKG-SA-2004.027] OpenPKG Security Advisory (cvs) MISC http://security.e-matters.de/advisories/092004.html GENTOO GLSA-200406-06 DEBIAN DSA-519 MANDRAKE MDKSA-2004:058 REDHAT RHSA-2004:233 serve_notify in CVS 1.12.x through 1.12.8, and 1.11.x through 1.11.16, does not properly handle empty data lines, which may allow remote attackers to perform an "out-of-bounds" write for a single byte to execute arbitrary code or modify critical program data.

cpe:/a:x.org:x11r6:6.7.0 cpe:/a:xfree86_project:xdm:cvs cpe:/o:gentoo:linux:1.4

CVE-2004-0419

2004-08-18T00:00:00.000-04:00

2017-10-10T21:29:25.793-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://bugs.xfree86.org/show_bug.cgi?id=1376 SECTRACK 1010306 CIAC P-001 GENTOO GLSA-200407-05 MANDRAKE MDKSA-2004:073 OPENBSD 20040526 008: SECURITY FIX: May 26, 2004 REDHAT RHSA-2004:478 BID 10423 CONFIRM https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124900 XF xdm-socket-gain-access(16264) XDM in XFree86 opens a chooserFd TCP socket even when DisplayManager.requestPort is 0, which could allow remote attackers to connect to the port, in violation of the intended restrictions.

cpe:/a:microsoft:ie:6.0 cpe:/a:microsoft:ie:6.0:sp1 cpe:/a:microsoft:ie:6.0.2800.1106

CVE-2004-0420

2004-07-07T00:00:00.000-04:00

2018-10-12T17:34:35.120-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CERT-VN VU#106324 BUGTRAQ 20040127 RE: GOOROO CROSSING: File Spoofing Internet Explorer 6 BUGTRAQ 20040127 GOOROO CROSSING: File Spoofing Internet Explorer 6 BID 9510 CERT TA04-196A MS MS04-024 XF ie-clsid-file-extension-spoofing(14964) The Windows Shell application in Windows 98, Windows ME, Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 allows remote attackers to execute arbitrary code by spoofing the type of a file via a CLSID specifier in the filename, as demonstrated using Internet Explorer 6.0.2800.1106 on Windows XP.

cpe:/a:greg_roelofs:libpng:1.0 cpe:/a:greg_roelofs:libpng:1.0.5 cpe:/a:greg_roelofs:libpng:1.0.6 cpe:/a:greg_roelofs:libpng:1.0.7 cpe:/a:greg_roelofs:libpng:1.0.8 cpe:/a:greg_roelofs:libpng:1.0.9 cpe:/a:greg_roelofs:libpng:1.0.10 cpe:/a:greg_roelofs:libpng:1.0.11 cpe:/a:greg_roelofs:libpng:1.0.12 cpe:/a:greg_roelofs:libpng:1.0.13 cpe:/a:greg_roelofs:libpng:1.0.14 cpe:/a:greg_roelofs:libpng3:1.2.0 cpe:/a:greg_roelofs:libpng3:1.2.1 cpe:/a:greg_roelofs:libpng3:1.2.2 cpe:/a:greg_roelofs:libpng3:1.2.3 cpe:/a:greg_roelofs:libpng3:1.2.4 cpe:/a:greg_roelofs:libpng3:1.2.5 cpe:/a:openpkg:openpkg:1.3 cpe:/a:openpkg:openpkg:2.0 cpe:/a:redhat:libpng:1.2.2-16::i386 cpe:/a:redhat:libpng:1.2.2-16::i386_dev cpe:/a:redhat:libpng:1.2.2-20::i386 cpe:/a:redhat:libpng:1.2.2-20::i386_dev cpe:/a:redhat:libpng:10.1.0.13.8::i386 cpe:/a:redhat:libpng:10.1.0.13.8::i386_dev cpe:/a:redhat:libpng:10.1.0.13.11::i386 cpe:/a:redhat:libpng:10.1.0.13.11::i386_dev cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:linux_advanced_workstation:2.1::ia64 cpe:/o:redhat:linux_advanced_workstation:2.1::itanium_processor cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1

CVE-2004-0421

2004-08-18T00:00:00.000-04:00

2017-10-10T21:29:25.997-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2004-09-09 BUGTRAQ 20040429 [OpenPKG-SA-2004.017] OpenPKG Security Advisory (png) TRUSTIX 2004-0025 FEDORA FEDORA-2004-105 FEDORA FEDORA-2004-106 DEBIAN DSA-498 MANDRAKE MDKSA-2004:040 MANDRIVA MDKSA-2006:212 MANDRIVA MDKSA-2006:213 REDHAT RHSA-2004:180 REDHAT RHSA-2004:181 BID 10244 XF libpng-png-dos(16022) The Portable Network Graphics library (libpng) 1.0.15 and earlier allows attackers to cause a denial of service (crash) via a malformed PNG image file that triggers an error that causes an out-of-bounds read when creating the error message.

cpe:/a:gnu:flim:1.14.2

CVE-2004-0422

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:09.043-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov DEBIAN DSA-500 REDHAT RHSA-2004:344 XF flim-insecure-temporary-file(16027) flim before 1.14.3 creates temporary files insecurely, which allows local users to overwrite arbitrary files of the Emacs user via a symlink attack.

cpe:/a:ssmtp:ssmtp:2.50.6

CVE-2004-0423

2004-07-07T00:00:00.000-04:00

2016-10-17T22:45:16.053-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040418 ssmtp insecure file creation The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file.

cpe:/a:sgi:propack:3.0 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.23:pre9 cpe:/o:linux:linux_kernel:2.4.23_ow2 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.24_ow1 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:slackware:slackware_linux:9.1 cpe:/o:slackware:slackware_linux:current

CVE-2004-0424

2004-07-07T00:00:00.000-04:00

2018-05-02T21:29:25.397-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SGI 20040504-01-U CONECTIVA CLA-2004:852 BUGTRAQ 20040420 Linux kernel setsockopt MCAST_MSFILTER integer overflow MISC http://www.isec.pl/vulnerabilities/isec-0015-msfilter.txt ENGARDE ESA-20040428-004 MANDRAKE MDKSA-2004:037 SUSE SuSE-SA:2004:010 REDHAT RHSA-2004:183 BID 10179 SLACKWARE SSA:2004-119 XF linux-ipsetsockopt-integer-bo(15907) Integer overflow in the ip_setsockopt function in Linux kernel 2.4.22 through 2.4.25 and 2.6.1 through 2.6.3 allows local users to cause a denial of service (crash) or execute arbitrary code via the MCAST_MSFILTER socket option.

cpe:/a:netegrity:sideminder_affiliate_agent:4.0

CVE-2004-0425

2004-08-18T00:00:00.000-04:00

2017-07-10T21:30:09.150-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

ATSTAKE A042204-1 BID 10198 XF siteminder-affiliate-smprofile-bo(15950) Heap-based buffer overflow in SiteMinder Affiliate Agent 4.x allows remote attackers to execute arbitrary code via a large SMPROFILE cookie.

cpe:/a:andrew_tridgell:rsync:2.6

CVE-2004-0426

2004-07-07T00:00:00.000-04:00

2017-10-10T21:29:26.090-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040521 [OpenPKG-SA-2004.025] OpenPKG Security Advisory (rsync) CONFIRM http://rsync.samba.org/ CIAC O-134 CIAC O-212 DEBIAN DSA-499 GENTOO GLSA-200407-10 MANDRAKE MDKSA-2004:042 REDHAT RHSA-2004:192 BID 10247 SLACKWARE SSA:2004-124-01 TRUSTIX TSL-2004-0024 XF rsync-write-files(16014) rsync before 2.6.1 does not properly sanitize paths when running a read/write daemon without using chroot, which allows remote attackers to write files outside of the module's path.

cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.6.0

CVE-2004-0427

2004-07-07T00:00:00.000-04:00

2018-05-02T21:29:25.600-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov SGI 20040504-01-U SGI 20040505-01-U CONECTIVA CLA-2004:846 FEDORA FEDORA-2004-111 MISC http://linux.bkbits.net:8080/linux-2.4/cset@407bf20eDeeejm8t36_tpvSE-8EFHA MISC http://linux.bkbits.net:8080/linux-2.6/cset@407b1217x4jtqEkpFW2g_-RcF0726A MLIST [linux-kernel] 20040408 [PATCH]: 2.4/2.6 do_fork() error path memory leak GENTOO GLSA-200407-02 CIAC O-164 DEBIAN DSA-1067 DEBIAN DSA-1069 DEBIAN DSA-1070 DEBIAN DSA-1082 MANDRAKE MDKSA-2004:037 SUSE SuSE-SA:2004:010 REDHAT RHSA-2004:255 REDHAT RHSA-2004:260 REDHAT RHSA-2004:327 BID 10221 TURBO TLSA-2004-14 XF linux-dofork-memory-leak(16002) The do_fork function in Linux 2.4.x before 2.4.26, and 2.6.x before 2.6.6, does not properly decrement the mm_count counter when an error occurs after the mm_struct for a child process has been activated, which triggers a memory leak that allows local users to cause a denial of service (memory exhaustion) via the clone (CLONE_VM) system call.

cpe:/o:apple:mac_os_x:10.2 cpe:/o:apple:mac_os_x:10.2.1 cpe:/o:apple:mac_os_x:10.2.2 cpe:/o:apple:mac_os_x:10.2.3 cpe:/o:apple:mac_os_x:10.2.4 cpe:/o:apple:mac_os_x:10.2.5 cpe:/o:apple:mac_os_x:10.2.6 cpe:/o:apple:mac_os_x:10.2.7 cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3 cpe:/o:apple:mac_os_x:10.3.1 cpe:/o:apple:mac_os_x:10.3.2 cpe:/o:apple:mac_os_x:10.3.3 cpe:/o:apple:mac_os_x_server:10.2 cpe:/o:apple:mac_os_x_server:10.2.1 cpe:/o:apple:mac_os_x_server:10.2.2 cpe:/o:apple:mac_os_x_server:10.2.3 cpe:/o:apple:mac_os_x_server:10.2.4 cpe:/o:apple:mac_os_x_server:10.2.5 cpe:/o:apple:mac_os_x_server:10.2.6 cpe:/o:apple:mac_os_x_server:10.2.7 cpe:/o:apple:mac_os_x_server:10.2.8 cpe:/o:apple:mac_os_x_server:10.3 cpe:/o:apple:mac_os_x_server:10.3.1 cpe:/o:apple:mac_os_x_server:10.3.2 cpe:/o:apple:mac_os_x_server:10.3.3

CVE-2004-0428

2004-05-03T00:00:00.000-04:00

2017-07-10T21:30:09.353-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2004-05-03 SECTRACK 1010045 AUSCERT ESB-2004.0314 BID 10270 XF macos-corefoundation-environment(16051) Unknown vulnerability in CoreFoundation in Mac OS X 10.3.3 and Mac OS X 10.3.3 Server, related to "the handling of an environment variable," has unknown attack vectors and unknown impact.

cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3.3

CVE-2004-0429

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:09.417-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov APPLE APPLE-SA-2004-05-03 BUGTRAQ 20040503 [product-security@apple.com: APPLE-SA-2004-05-03 Security Update 2004-05-03] SECTRACK 1010045 AUSCERT ESB-2004.0314 CIAC O-138 XF macos-radmin-large-request(16053) Unknown vulnerability related to "the handling of large requests" in RAdmin for Apple Mac OS X 10.3.3 and Mac OS X 10.2.8 may allow attackers to have unknown impact via unknown attack vectors.

cpe:/o:apple:mac_os_x:10.3.3 cpe:/o:apple:mac_os_x_server:10.3.3

CVE-2004-0430

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:09.463-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

APPLE APPLE-SA-2004-05-03 SECTRACK 1010039 ATSTAKE A050304-1 CERT-VN VU#648406 MISC http://www.securiteam.com/securitynews/5QP0115CUO.html XF applefileserver-afp-pathname-bo(16049) Stack-based buffer overflow in AppleFileServer for Mac OS X 10.3.3 and earlier allows remote attackers to execute arbitrary code via a LoginExt packet for a Cleartext Password User Authentication Method (UAM) request with a PathName argument that includes an AFPName type string that is longer than the associated length field.

cpe:/a:apple:quicktime:6.5

CVE-2004-0431

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:09.510-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

APPLE APPLE-SA-2004-04-30 BUGTRAQ 20040502 EEYE: Apple QuickTime (QuickTime.qts) Heap Overflow NTBUGTRAQ 20040502 EEYE: Apple QuickTime (QuickTime.qts) Heap Overflow CERT-VN VU#782958 XF quicktime-heap-bo(16026) Integer overflow in Apple QuickTime (QuickTime.qts) before 6.5.1 allows attackers to execute arbitrary code via a large "number of entries" field in the sample-to-chunk table data for a .mov movie file, which leads to a heap-based buffer overflow.

cpe:/a:proftpd_project:proftpd:1.2.9 cpe:/o:gentoo:linux:0.5 cpe:/o:gentoo:linux:0.7 cpe:/o:gentoo:linux:1.1a cpe:/o:gentoo:linux:1.2 cpe:/o:gentoo:linux:1.4 cpe:/o:gentoo:linux:1.4:rc1 cpe:/o:gentoo:linux:1.4:rc2 cpe:/o:gentoo:linux:1.4:rc3 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1

CVE-2004-0432

2004-08-18T00:00:00.000-04:00

2017-07-10T21:30:09.557-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://bugs.proftpd.org/show_bug.cgi?id=2267 TRUSTIX 2004-0025 BUGTRAQ 20040430 [OpenPKG-SA-2004.018] OpenPKG Security Advisory (proftpd) MANDRAKE MDKSA-2004:041 BID 10252 XF proftpd-cidr-acl-bypass(16038) ProFTPD 1.2.9 treats the Allow and Deny directives for CIDR based ACL entries as if they were AllowAll, which could allow FTP clients to bypass intended access restrictions.

cpe:/a:mplayer:mplayer:1.0_pre3try2 cpe:/a:xine:xine-lib:1_beta1 cpe:/a:xine:xine-lib:1_beta2 cpe:/a:xine:xine-lib:1_beta3 cpe:/a:xine:xine-lib:1_beta4 cpe:/a:xine:xine-lib:1_beta5 cpe:/a:xine:xine-lib:1_beta6 cpe:/a:xine:xine-lib:1_beta7 cpe:/a:xine:xine-lib:1_beta8 cpe:/a:xine:xine-lib:1_beta9 cpe:/a:xine:xine-lib:1_beta10 cpe:/a:xine:xine-lib:1_beta11 cpe:/a:xine:xine-lib:1_rc2 cpe:/a:xine:xine-lib:1_rc3a cpe:/a:xine:xine-lib:1_rc3b cpe:/a:xine:xine-lib:1_rc3c

CVE-2004-0433

2004-08-18T00:00:00.000-04:00

2017-07-10T21:30:09.620-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

GENTOO GLSA-200405-24 CONFIRM http://www.xinehq.de/index.php/security/XSA-2004-3 XF mplayer-rtsp-rdt-bo(16019) Multiple buffer overflows in the Real-Time Streaming Protocol (RTSP) client for (1) MPlayer before 1.0pre4 and (2) xine lib (xine-lib) before 1-rc4, when playing Real RTSP (realrtsp) streams, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via (a) long URLs, (b) long Real server responses, or (c) long Real Data Transport (RDT) packets.

cpe:/a:kth:heimdal

CVE-2004-0434

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:09.683-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FREEBSD FreeBSD-SA-04:09 FULLDISC 20040506 Advisory: Heimdal kadmind version4 remote heap overflow BUGTRAQ 20040505 Advisory: Heimdal kadmind version4 remote heap overflow GENTOO GLSA-200405-23 DEBIAN DSA-504 XF heimdal-kadmind-bo(16071) k5admind (kadmind) for Heimdal allows remote attackers to execute arbitrary code via a Kerberos 4 compatibility administration request whose framing length is less than 2, which leads to a heap-based buffer overflow.

cpe:/o:freebsd:freebsd:4.0:releng cpe:/o:freebsd:freebsd:4.8 cpe:/o:freebsd:freebsd:4.8:pre-release cpe:/o:freebsd:freebsd:4.8:release_p6 cpe:/o:freebsd:freebsd:4.8:releng cpe:/o:freebsd:freebsd:4.9 cpe:/o:freebsd:freebsd:4.9:pre-release cpe:/o:freebsd:freebsd:4.9:releng cpe:/o:freebsd:freebsd:4.10 cpe:/o:freebsd:freebsd:4.10:release cpe:/o:freebsd:freebsd:4.10:releng cpe:/o:freebsd:freebsd:5.2 cpe:/o:freebsd:freebsd:5.2.1:release cpe:/o:freebsd:freebsd:5.2.1:releng

CVE-2004-0435

2004-08-18T00:00:00.000-04:00

2017-07-10T21:30:09.730-04:00

3.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov FREEBSD FreeBSD-SA-04:11 BID 10416 XF freebsd-msync-gain-privileges(16254) Certain "programming errors" in the msync system call for FreeBSD 5.2.1 and earlier, and 4.10 and earlier, do not properly handle the MS_INVALIDATE operation, which leads to cache consistency problems that allow a local user to prevent certain changes to files from being committed to disk.

cpe:/a:south_river_technologies:titan_ftp_server:3.01_build_163

CVE-2004-0437

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:09.777-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov VULNWATCH 20040505 Titan FTP Server Aborted LIST DoS BUGTRAQ 20040505 Titan FTP Server Aborted LIST DoS MISC http://www.securiteam.com/windowsntfocus/5RP0215CUU.html XF titan-list-command-dos(16057) Titan FTP Server version 3.01 build 163, and possibly other versions before build 169, allows remote authenticated users to cause a denial of service (crash) by disconnecting from the system during a "LIST -L" command, which causes Titan to access an invalid socket.

cpe:/a:symantec:client_firewall:5.01 cpe:/a:symantec:client_firewall:5.1.1 cpe:/a:symantec:client_security:1.0 cpe:/a:symantec:client_security:1.1 cpe:/a:symantec:client_security:1.2 cpe:/a:symantec:client_security:1.3 cpe:/a:symantec:client_security:1.4 cpe:/a:symantec:client_security:1.5 cpe:/a:symantec:client_security:1.6 cpe:/a:symantec:client_security:1.7 cpe:/a:symantec:client_security:1.8 cpe:/a:symantec:client_security:1.9 cpe:/a:symantec:client_security:2.0 cpe:/a:symantec:norton_antispam:2004 cpe:/a:symantec:norton_internet_security:2002 cpe:/a:symantec:norton_internet_security:2002::pro cpe:/a:symantec:norton_internet_security:2003 cpe:/a:symantec:norton_internet_security:2003::pro cpe:/a:symantec:norton_internet_security:2004 cpe:/a:symantec:norton_internet_security:2004::pro cpe:/a:symantec:norton_personal_firewall:2002 cpe:/a:symantec:norton_personal_firewall:2003 cpe:/a:symantec:norton_personal_firewall:2004

CVE-2004-0444

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:09.870-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20040512 EEYE: Symantec Multiple Firewall NBNS Response Processing Stack Overflow FULLDISC 20040512 EEYE: Symantec Multiple Firewall Remote DNS KERNEL Overflow FULLDISC 20040512 EEYE: Symantec Multiple Firewall NBNS Response Remote Heap Corruption CONFIRM http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html SECTRACK 1010144 SECTRACK 1010145 SECTRACK 1010146 CIAC O-141 CERT-VN VU#294998 CERT-VN VU#634414 CERT-VN VU#637318 BID 10333 BID 10334 BID 10335 XF symantec-nbns-response-bo(16134) XF symantec-firewalls-nbns-bo(16135) XF symantec-dns-response-bo(16137) Multiple vulnerabilities in SYMDNS.SYS for Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allow remote attackers to cause a denial of service or execute arbitrary code via (1) a manipulated length byte in the first-level decoding routine for NetBIOS Name Service (NBNS) that modifies an index variable and leads to a stack-based buffer overflow, (2) a heap-based corruption problem in an NBNS response that is missing certain RR fields, and (3) a stack-based buffer overflow in the DNS component via a Resource Record (RR) with a long canonical name (CNAME) field composed of many smaller components.

CVE-2004-0445

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:09.933-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov FULLDISC 20040512 EEYE: Symantec Multiple Firewall DNS Response Denial-of-Service CONFIRM http://securityresponse.symantec.com/avcenter/security/Content/2004.05.12.html SECTRACK 1010144 SECTRACK 1010145 SECTRACK 1010146 CIAC O-141 CERT-VN VU#682110 BID 10336 XF symantec-firewall-dns-dos(16132) The SYMDNS.SYS driver in Symantec Norton Internet Security and Professional 2002 through 2004, Norton Personal Firewall 2002 through 2004, Norton AntiSpam 2004, Client Firewall 5.01 and 5.1.1, and Client Security 1.0 through 2.0 allows remote attackers to cause a denial of service (CPU consumption from infinite loop) via a DNS response with a compressed name pointer that points to itself.

cpe:/o:linux:linux_kernel:2.4.25::ia64

CVE-2004-0447

2004-08-06T00:00:00.000-04:00

2017-10-10T21:29:26.153-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov SGI 20040804-01-U MLIST [owl-users] 20040619 Linux 2.4.26-ow2 GENTOO GLSA-200407-16 CIAC O-193 DEBIAN DSA-1067 DEBIAN DSA-1069 DEBIAN DSA-1070 DEBIAN DSA-1082 REDHAT RHSA-2004:413 BID 10783 XF linux-ia64-dos(16661) Unknown vulnerability in Linux before 2.4.26 for IA64 allows local users to cause a denial of service, with unknown impact. NOTE: due to a typo, this issue was accidentally assigned CVE-2004-0477. This is the proper candidate to use for the Linux local DoS.

cpe:/a:jftpgw:jftpgw:0.13 cpe:/a:jftpgw:jftpgw:0.13.1 cpe:/a:jftpgw:jftpgw:0.13.2 cpe:/a:jftpgw:jftpgw:0.13.3

CVE-2004-0448

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:10.043-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

DEBIAN DSA-510 BID 10438 XF jftpgw-log-format-string(16271) Format string vulnerability in the log function for jftpgw 0.13.4 and earlier allows remote authenticated users to execute arbitrary code via format string specifiers in certain syslog messages.

CVE-2004-0449

2017-05-11T10:29:01.683-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

cpe:/a:log2mail:log2mail:0.2.2.2 cpe:/a:log2mail:log2mail:0.2.5.0 cpe:/a:log2mail:log2mail:0.2.5.1 cpe:/a:log2mail:log2mail:0.2.5.2

CVE-2004-0450

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:10.103-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://felinemenace.org/~jaguar/advisories/log2mail.txt DEBIAN DSA-513 BID 10460 XF log2mail-syslog-format-string(16311) Format string vulnerability in the printlog function in log2mail before 0.2.5.2 allows local users or remote attackers to execute arbitrary code via format string specifiers in a logfile monitored by log2mail.

cpe:/a:sup:sup:1.8 cpe:/o:debian:debian_linux:3.0 cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::hppa cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::sparc

CVE-2004-0451

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:10.167-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1010539 DEBIAN DSA-521 BID 10571 XF sup-format-string(16459) Multiple format string vulnerabilities in the (1) logquit, (2) logerr, or (3) loginfo functions in Software Upgrade Protocol (SUP) allows remote attackers to execute arbitrary code via format string specifiers in messages that are logged by syslog.

cpe:/a:larry_wall:perl:5.6.1 cpe:/a:larry_wall:perl:5.8.4

CVE-2004-0452

2004-12-21T00:00:00.000-05:00

2017-10-10T21:29:26.217-04:00

2.6

LOCAL

HIGH

NONE

PARTIAL

http://nvd.nist.gov SGI 20060101-01-U FEDORA FLSA-2006:152845 BUGTRAQ 20050111 [OpenPKG-SA-2005.001] OpenPKG Security Advisory (perl) DEBIAN DSA-620 GENTOO GLSA-200501-38 REDHAT RHSA-2005:103 REDHAT RHSA-2005:105 BID 12072 XF perl-filepathrmtree-insecure-permissions(18650) UBUNTU USN-44-1 Race condition in the rmtree function in the File::Path module in Perl 5.6.1 and 5.8.4 sets read/write permissions for the world, which allows local users to delete arbitrary files and directories, and possibly read files and directories, via a symlink attack.

cpe:/a:vice:vice:1.6 cpe:/a:vice:vice:1.13 cpe:/a:vice:vice:1.14

CVE-2004-0453

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:10.307-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040614 VICE emulator format string vulnerability BID 10543 XF vice-memory-dump-format-string(16404) Format string vulnerability in the monitor "memory dump" command in VICE 1.6 to 1.14 allows local users to cause a denial of service (emulator crash) and possibly execute arbitrary code via format string specifiers in an output string.

cpe:/a:rlpr:rlpr:2.0 cpe:/a:rlpr:rlpr:2.0.1 cpe:/a:rlpr:rlpr:2.0.2 cpe:/a:rlpr:rlpr:2.0.3 cpe:/a:rlpr:rlpr:2.0.4

CVE-2004-0454

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:10.353-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

DEBIAN DSA-524 BID 10578 XF rlpr-msg-bo(16454) Buffer overflow in the msg function for rlpr daemon (rlprd) 2.04 allows local users to execute arbitrary code.

CVE-2004-0455

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:10.400-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov DEBIAN DSA-523 BID 10577 XF wwwsql-cgi-command-execution(16455) Buffer overflow in cgi.c in www-sql before 0.5.7 allows local users to execute arbitrary code via a web page that is processed by www-sql.

cpe:/a:pavuk:pavuk:0.9pl28i cpe:/a:pavuk:pavuk:0.928r1 cpe:/o:debian:debian_linux:3.0 cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::hppa cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::sparc cpe:/o:gentoo:linux:1.1a cpe:/o:gentoo:linux:1.2 cpe:/o:gentoo:linux:1.4 cpe:/o:gentoo:linux:1.4:rc1 cpe:/o:gentoo:linux:1.4:rc2 cpe:/o:gentoo:linux:1.4:rc3

CVE-2004-0456

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:10.447-04:00

7.6

NETWORK

HIGH

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20040702 pavuk buffer overflow GENTOO GLSA-200406-22 DEBIAN DSA-527 BID 10633 XF pavuk-location-bo(16551) Stack-based buffer overflow in pavuk 0.9pl28, 0.9pl27, and possibly other versions allows remote web sites to execute arbitrary code via a long HTTP Location header.

cpe:/a:mysql:mysql:4.0.20

CVE-2004-0457

2004-09-28T00:00:00.000-04:00

2017-10-10T21:29:26.277-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CIAC P-018 DEBIAN DSA-540 REDHAT RHSA-2004:597 XF mysql-mysqlhotcopy-insecure-file(17030) The mysqlhotcopy script in mysql 4.0.20 and earlier, when using the scp method from the mysql-server package, allows local users to overwrite arbitrary files via a symlink attack on temporary files.

cpe:/a:nicolas_boullis:mah-jong:1.4 cpe:/a:nicolas_boullis:mah-jong:1.6

CVE-2004-0458

2004-09-28T00:00:00.000-04:00

2017-07-10T21:30:10.557-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov DEBIAN DSA-503 BID 10343 XF mah-jong-null-dos(16143) mah-jong before 1.6.2 allows remote attackers to cause a denial of service (server crash) via a missing argument, which triggers a null pointer dereference.

cpe:/a:ieee:802.11_wireless_protocol

CVE-2004-0459

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:10.603-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FULLDISC 20040513 802.11b (others) single packet DoS SECTRACK 1010152 MISC http://support.avaya.com/elmodocs2/security/ASA-2004-009.pdf AUSCERT AA-2004.02 CERT-VN VU#106678 BID 10342 XF ieee80211-cca-dos(16138) The Clear Channel Assessment (CCA) algorithm in the IEEE 802.11 wireless protocol, when using DSSS transmission encoding, allows remote attackers to cause a denial of service via a certain RF signal that causes a channel to appear busy (aka "jabber"), which prevents devices from transmitting data.

cpe:/a:isc:dhcpd:3.0.1:rc12 cpe:/a:isc:dhcpd:3.0.1:rc13 cpe:/a:suse:suse_email_server:iii cpe:/a:suse:suse_linux_admin-cd_for_firewall cpe:/a:suse:suse_linux_connectivity_server cpe:/a:suse:suse_linux_database_server cpe:/a:suse:suse_linux_firewall_cd cpe:/a:suse:suse_linux_office_server cpe:/h:infoblox:dns_one_appliance:2.3.1_r5 cpe:/h:infoblox:dns_one_appliance:2.4.0.8 cpe:/h:infoblox:dns_one_appliance:2.4.0.8a cpe:/o:mandrakesoft:mandrake_linux:9.0 cpe:/o:mandrakesoft:mandrake_linux:9.1 cpe:/o:mandrakesoft:mandrake_linux:9.1::ppc cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:9.2::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:suse:suse_linux:7::enterprise_server cpe:/o:suse:suse_linux:8::enterprise_server cpe:/o:suse:suse_linux:8.0 cpe:/o:suse:suse_linux:8.0::i386 cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1

CVE-2004-0460

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:10.667-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040622 DHCP Vuln // no code 0day // BUGTRAQ 20040628 ISC DHCP overflows BUGTRAQ 20040708 [OpenPKG-SA-2004.031] OpenPKG Security Advisory (dhcpd) CERT-VN VU#317350 MANDRAKE MDKSA-2004:061 SUSE SuSE-SA:2004:019 BID 10590 CERT TA04-174A CONFIRM http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf XF dhcp-ascii-log-bo(16475) Buffer overflow in the logging capability for the DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via multiple hostname options in (1) DISCOVER, (2) OFFER, (3) REQUEST, (4) ACK, or (5) NAK messages, which can generate a long string when writing to a log file.

CVE-2004-0461

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:10.747-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040622 DHCP Vuln // no code 0day // BUGTRAQ 20040628 ISC DHCP overflows BUGTRAQ 20040708 [OpenPKG-SA-2004.031] OpenPKG Security Advisory (dhcpd) CERT-VN VU#654390 MANDRAKE MDKSA-2004:061 SUSE SuSE-SA:2004:019 BID 10591 CERT TA04-174A CONFIRM http://www.xerox.com/downloads/usa/en/c/cert_XRX06_004_v11.pdf XF dhcp-c-include-bo(16476) The DHCP daemon (DHCPD) for ISC DHCP 3.0.1rc12 and 3.0.1rc13, when compiled in environments that do not provide the vsnprintf function, uses C include files that define vsnprintf to use the less safe vsprintf function, which can lead to buffer overflow vulnerabilities that enable a denial of service (server crash) and possibly execute arbitrary code.

CVE-2004-0462

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:10.793-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CERT-VN VU#546483 XF network-device-secure-plaintext(17702) The built-in web servers for multiple networking devices do not set the Secure attribute for sensitive cookies in HTTPS sessions, which could cause the user agent to send those cookies in plaintext over an HTTP session with the same server.

CVE-2004-0463

2017-05-11T10:29:01.697-04:00

2017-05-11T10:29:01.713-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

CVE-2004-0464

2017-05-11T10:29:01.730-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

cpe:/a:openconnect:webconnect:6.4.4 cpe:/a:openconnect:webconnect:6.5

CVE-2004-0465

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:10.840-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20050220 The WebConnect 6.4.4 and 6.5 contains several vulnerabilities MISC http://www.cirt.dk/advisories/cirt-29-advisory.pdf CERT-VN VU#628411 CONFIRM http://www.kb.cert.org/vuls/id/JSHA-69HVPK XF webconnect-wcpuser-directory-traversal(19394) Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to read keys within arbitrary INI formatted files via "..//" sequences in the WCP_USER parameter.

cpe:/a:openconnect:webconnect:6.4.4 cpe:/a:openconnect:webconnect:6.5

CVE-2004-0466

2004-02-21T00:00:00.000-05:00

2017-07-10T21:30:10.917-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050220 The WebConnect 6.4.4 and 6.5 contains several vulnerabilities MISC http://www.cirt.dk/advisories/cirt-29-advisory.pdf CERT-VN VU#552561 CONFIRM http://www.kb.cert.org/vuls/id/JSHA-69FVMM XF webconnect-device-name-dos(19393) WebConnect 6.5, 6.4.4, and possibly earlier versions allows remote attackers to cause a denial of service (hang) via a URL containing an MS-DOS device name such as (1) AUX, (2) CON, (3) PRN, (4) COM1, or (5) LPT1.

cpe:/o:juniper:junos:5.0 cpe:/o:juniper:junos:5.1 cpe:/o:juniper:junos:5.2 cpe:/o:juniper:junos:5.3 cpe:/o:juniper:junos:5.4 cpe:/o:juniper:junos:5.5 cpe:/o:juniper:junos:5.6 cpe:/o:juniper:junos:5.7 cpe:/o:juniper:junos:6.1 cpe:/o:juniper:junos:6.2 cpe:/o:juniper:junos:6.3

CVE-2004-0467

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:10.980-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1013039 CERT-VN VU#409555 CONFIRM http://www.kb.cert.org/vuls/id/JSHA-68ZJCQ MISC http://www.niscc.gov.uk/niscc/docs/al-20050126-00067.html?lang=en REDHAT RHSA-2005:081 BID 12379 XF junos-dos(19094) Juniper JUNOS 5.x through JUNOS 7.x allows remote attackers to cause a denial of service (routing disabled) via a large number of MPLS packets, which are not filtered or verified before being sent to the Routing Engine, which reduces the speed at which other packets are processed.

cpe:/o:juniper:junos

CVE-2004-0468

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:11.043-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://www.jpcert.or.jp/at/2004/at040009.txt CERT-VN VU#658859 CONFIRM http://www.kb.cert.org/vuls/id/JSHA-6253CC XF juniper-ipv6-dos(16548) Memory leak in Juniper JUNOS Packet Forwarding Engine (PFE) allows remote attackers to cause a denial of service (memory exhaustion and device reboot) via certain IPv6 packets.

cpe:/a:checkpoint:firewall-1:::vsx-ng-ai cpe:/a:checkpoint:firewall-1:2.0::gx cpe:/a:checkpoint:firewall-1:2.0.1::vsx cpe:/a:checkpoint:next_generation:::fp3 cpe:/a:checkpoint:ng-ai:r54 cpe:/a:checkpoint:ng-ai:r55 cpe:/a:checkpoint:vpn-1:vsx_2.0.1 cpe:/a:checkpoint:vpn-1:vsx_ng_with_application_intelligence

CVE-2004-0469

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:11.090-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CHECKPOINT 20040504 ISAKMP Vulnerability BID 10273 XF vpn1-isakmp-bo(16060) Buffer overflow in the ISAKMP functionality for Check Point VPN-1 and FireWall-1 NG products, before VPN-1/FireWall-1 R55 HFA-03, R54 HFA-410 and NG FP3 HFA-325, or VPN-1 SecuRemote/SecureClient R56, may allow remote attackers to execute arbitrary code during VPN tunnel negotiation.

cpe:/a:bea:weblogic_server:7.0 cpe:/a:bea:weblogic_server:7.0::express cpe:/a:bea:weblogic_server:8.1 cpe:/a:bea:weblogic_server:8.1::express

CVE-2004-0470

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:11.150-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_59.00.jsp SECTRACK 1010128 CERT-VN VU#950070 BID 10328 XF weblogic-application-unauth-access(16123) BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2, when editing weblogic.xml using WebLogic Builder or the SecurityRoleAssignmentMBean.toXML method, inadvertently removes security-role-assignment tags when weblogic.xml does not have a principal-name tag, which can remove intended access restrictions for the associated web application.

cpe:/a:bea:weblogic_server:7.0 cpe:/a:bea:weblogic_server:7.0::express cpe:/a:bea:weblogic_server:8.1 cpe:/a:bea:weblogic_server:8.1::express

CVE-2004-0471

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:11.213-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_60.00.jsp SECTRACK 1010129 BID 10327 XF weblogic-server-policy-bypass(16121) BEA WebLogic Server and WebLogic Express 7.0 through SP5 and 8.1 through SP2 does not enforce site restrictions for starting and stopping servers for users in the Admin and Operator security roles, which allows unauthorized users to cause a denial of service (service shutdown).

CVE-2004-0472

2004-07-07T00:00:00.000-04:00

2008-09-10T15:26:35.557-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is a reservation duplicate of CVE-2004-0434. Notes: All CVE users should reference CVE-2004-0434 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/a:opera_software:opera_web_browser:9.10

CVE-2004-0473

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:11.260-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov GENTOO GLSA-200405-19 SECTRACK 1010142 IDEFENSE 20040512 Opera Telnet URI Handler File Creation/Truncation Vulnerability CONFIRM http://www.opera.com/linux/changelogs/750/index.dml BID 10341 XF opera-telnet-file-overwrite(16139) Argument injection vulnerability in Opera before 7.50 does not properly filter "-" characters that begin a hostname in a telnet URI, which allows remote attackers to insert options to the resulting command line and overwrite arbitrary files via (1) the "-f" option on Windows XP or (2) the "-n" option on Linux.

cpe:/o:microsoft:windows_xp:::home cpe:/o:microsoft:windows_xp::gold:professional cpe:/o:microsoft:windows_xp::sp1:home

CVE-2004-0474

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:11.323-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20040210 Re: HelpCtr - allow open any page or run FULLDISC 20040210 Re: HelpCtr - allow open any page or run FULLDISC 20040213 Re: HelpCtr - allow open any page or run BUGTRAQ 20040211 Re: HelpCtr - allow open any page or run BUGTRAQ 20040207 HelpCtr - allow open any page or run BID 9621 XF winxp-helpctr-hcp-xss(15101) Help Center (HelpCtr.exe) may allow remote attackers to read or execute arbitrary files via an "http://" or "file://" argument to the topic parameter in an hcp:// URL. NOTE: since the initial report of this problem, several researchers have been unable to reproduce this issue.

cpe:/a:microsoft:ie:6.0:sp1

CVE-2004-0475

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:11.370-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040513 Showhelp() local CHM file execution BID 10348 XF ie-showhelp-chm-execution(16147) The showHelp function in Internet Explorer 6 on Windows XP Pro allows remote attackers to execute arbitrary local .CHM files via a double backward slash ("\\") before the target CHM file, as demonstrated using an "ms-its" URL to ntshared.chm. NOTE: this bug may overlap CVE-2003-1041.

cpe:/h:3com:3cp4144 cpe:/h:3com:3cp4144:1.1.9.4

CVE-2004-0476

2004-08-18T00:00:00.000-04:00

2017-07-10T21:30:11.433-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov IDEFENSE 20040526 OfficeConnect Remote 812 ADSL Router Telnet Protocol DoS Vulnerability BID 10419 XF 3com-officeconnect-telnet-bo(16257) Buffer overflow in 3Com OfficeConnect Remote 812 ADSL Router 1.1.9.4 allows remote attackers to cause a denial of service (reboot or packet loss) via a long string containing Telnet escape characters to the Telnet port.

cpe:/h:3com:3cp4144 cpe:/h:3com:3cp4144:1.1.9.4

CVE-2004-0477

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:11.480-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20040527 iDEFENSE Security Advisory 05.27.04: 3Com OfficeConnect Remote 812 ADSL Router Authentication Bypass Vulnerability BID 10426 XF 3com-officeconnect-gain-access(16267) Unknown vulnerability in 3Com OfficeConnect Remote 812 ADSL Router allows remote attackers to bypass authentication via repeated attempts using any username and password. NOTE: this identifier was inadvertently re-used for another issue due to a typo; that issue was assigned CVE-2004-0447. This candidate is ONLY for the ADSL router bypass.

cpe:/a:mozilla:mozilla

CVE-2004-0478

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:11.527-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=243540 MLIST [Dailydave] 20040514 Mozilla bug might even get fixed! XF mozilla-javascript-dos(16225) Unknown versions of Mozilla allow remote attackers to cause a denial of service (high CPU/RAM consumption) using Javascript with an infinite loop that continues to add input to a form, possibly as the result of inserting control characters, as demonstrated using an embedded ctrl-U.

cpe:/a:microsoft:ie:6:windows_server_2003_sp1

CVE-2004-0479

2004-07-07T00:00:00.000-04:00

2016-10-17T22:45:34.447-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FULLDISC 20040514 IE Crash - Anyone Seen This Before? VULN-DEV 20040514 IE Crash - Anyone Seen This Before? VULN-DEV 20040516 Re: IE Crash - Anyone Seen This Before? Internet Explorer 6 allows remote attackers to cause a denial of service (crash) via Javascript that creates a new popup window and disables the imagetoolbar functionality with a META tag, which triggers a null dereference.

cpe:/a:ibm:lotus_notes:6.0 cpe:/a:ibm:lotus_notes:6.0.1 cpe:/a:ibm:lotus_notes:6.0.2 cpe:/a:ibm:lotus_notes:6.0.3 cpe:/a:ibm:lotus_notes:6.5 cpe:/a:ibm:lotus_notes:6.5.1

CVE-2004-0480

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:11.590-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040627 Lotus Notes URL argument injection vulnerability MISC http://www.idefense.com/application/poi/display?id=111&type=vulnerabilities BID 10600 CONFIRM http://www-1.ibm.com/support/docview.wss?rs=475/context=SSKTWP&uid=swg21169510 XF lotus-notes-xss(16496) Argument injection vulnerability in IBM Lotus Notes 6.0.3 and 6.5 allows remote attackers to execute arbitrary code via a notes: URI that uses a UNC network share pathname to provide an alternate notes.ini configuration file to notes.exe.

cpe:/o:sun:solaris:8.0::x86 cpe:/o:sun:solaris:9.0::sparc cpe:/o:sun:solaris:9.0::x86 cpe:/o:sun:sunos:5.8

CVE-2004-0481

2005-02-23T00:00:00.000-05:00

2018-10-30T12:26:23.107-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-15T11:22:00.000-04:00

SUNALERT 57706 IDEFENSE 20050223 Sun Solaris kcms_configure Arbitrary File Corruption Vulnerability The logging feature in kcms_configure in the KCMS package on Solaris 8 and 9, and possibly other versions, allows local users to corrupt arbitrary files via a symlink attack on the KCS_ClogFile file.

cpe:/o:openbsd:openbsd:3.4 cpe:/o:openbsd:openbsd:3.5

CVE-2004-0482

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:11.650-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.4/common/020_procfs.patch CONFIRM ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.5/common/006_procfs.patch FULLDISC 20040517 OpenBSD procfs MLIST [openbsd-security-announce] 20040513 procfs vulnerability MISC http://www.deprotect.com/advisories/DEPROTECT-20041305.txt OPENBSD 20040513 [3.4] 020: SECURITY FIX: May 13, 2004 OPENBSD 20040513 [3.5] 006: SECURITY FIX: May 13, 2004 XF openbsd-procfs-gain-privileges(16226) Multiple integer overflows in (1) procfs_cmdline.c, (2) procfs_fpregs.c, (3) procfs_linux.c, (4) procfs_regs.c, (5) procfs_status.c, and (6) procfs_subr.c in procfs for OpenBSD 3.5 and earlier allow local users to read sensitive kernel memory and possibly perform other unauthorized activities.

cpe:/o:sgi:irix:6.5.24

CVE-2004-0483

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:11.713-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SGI 20040503-01-P SECTRACK 1010185 BID 10372 XF rpcmountd-rpc-dos(16175) Unknown vulnerability in rpc.mountd for SGI IRIX 6.5.24 allows remote attackers to cause a denial of service (infinite loop) via certain RPC requests.

cpe:/a:microsoft:ie:6.0.2900

CVE-2004-0484

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:11.760-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040518 Unknown IE bug with css-styles BID 10382 XF ie-css-dos(16189) mshtml.dll in Microsoft Internet Explorer 6.0.2800 allows remote attackers to cause a denial of service (crash) via a table containing a form that crosses multiple td elements, and whose "float: left" class is defined in a link to a CSS stylesheet after the end of the table, which may trigger a null dereference.

cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3.3

CVE-2004-0485

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:11.823-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://fundisom.com/owned/warning APPLE APPLE-SA-2004-05-21 APPLE APPLE-SA-2004-05-28 CERT-VN VU#210606 XF macos-runscript-code-execution(16166) The default protocol helper for the disk: URI on Mac OS X 10.3.3 and 10.2.8 allows remote attackers to write arbitrary files by causing a disk image file (.dmg) to be mounted as a disk volume.

cpe:/o:apple:mac_os_x:10.3 cpe:/o:apple:mac_os_x:10.3.1 cpe:/o:apple:mac_os_x:10.3.2 cpe:/o:apple:mac_os_x:10.3.3 cpe:/o:apple:mac_os_x_server:10.3 cpe:/o:apple:mac_os_x_server:10.3.1 cpe:/o:apple:mac_os_x_server:10.3.2 cpe:/o:apple:mac_os_x_server:10.3.3

CVE-2004-0486

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:12.120-04:00

7.6

NETWORK

HIGH

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20040516 Vuln. MacOSX/Safari: Remote help-call, execute scripts APPLE APPLE-SA-2004-05-21 SECTRACK 1010167 MISC http://www.fundisom.com/owned/warning CERT-VN VU#578798 BID 10356 XF macos-runscript-code-execution(16166) HelpViewer in Mac OS X 10.3.3 and 10.2.8 processes scripts that it did not initiate, which can allow attackers to execute arbitrary code, an issue that was originally reported as a directory traversal vulnerability in the Safari web browser using the runscript parameter in a help: URI handler.

cpe:/a:symantec:norton_antivirus:2.1::ms_exchange

CVE-2004-0487

2004-08-18T00:00:00.000-04:00

2017-07-10T21:30:12.213-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040521 [SNS Advisory No.72] Symantec Norton AntiVirus 2004 ActiveX Control Vulnerability CIAC O-149 CERT-VN VU#312510 MISC http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/72_e.html BID 10392 CONFIRM http://www.symantec.com/avcenter/security/Content/2004.05.20.html XF nav-activex-code-execution(16220) A certain ActiveX control in Symantec Norton AntiVirus 2004 allows remote attackers to cause a denial of service (resource consumption) and possibly execute arbitrary programs.

cpe:/a:apache:http_server:1.3 cpe:/a:apache:http_server:1.3.1 cpe:/a:apache:http_server:1.3.3 cpe:/a:apache:http_server:1.3.4 cpe:/a:apache:http_server:1.3.6 cpe:/a:apache:http_server:1.3.7::dev cpe:/a:apache:http_server:1.3.9 cpe:/a:apache:http_server:1.3.11 cpe:/a:apache:http_server:1.3.12 cpe:/a:apache:http_server:1.3.14 cpe:/a:apache:http_server:1.3.17 cpe:/a:apache:http_server:1.3.18 cpe:/a:apache:http_server:1.3.19 cpe:/a:apache:http_server:1.3.20 cpe:/a:apache:http_server:1.3.22 cpe:/a:apache:http_server:1.3.23 cpe:/a:apache:http_server:1.3.24 cpe:/a:apache:http_server:1.3.25 cpe:/a:apache:http_server:1.3.26 cpe:/a:apache:http_server:1.3.27 cpe:/a:apache:http_server:1.3.28 cpe:/a:apache:http_server:1.3.29 cpe:/a:apache:http_server:1.3.31 cpe:/a:apache:http_server:2.0 cpe:/a:apache:http_server:2.0.9 cpe:/a:apache:http_server:2.0.28 cpe:/a:apache:http_server:2.0.28:beta cpe:/a:apache:http_server:2.0.32 cpe:/a:apache:http_server:2.0.35 cpe:/a:apache:http_server:2.0.36 cpe:/a:apache:http_server:2.0.37 cpe:/a:apache:http_server:2.0.38 cpe:/a:apache:http_server:2.0.39 cpe:/a:apache:http_server:2.0.40 cpe:/a:apache:http_server:2.0.41 cpe:/a:apache:http_server:2.0.42 cpe:/a:apache:http_server:2.0.43 cpe:/a:apache:http_server:2.0.44 cpe:/a:apache:http_server:2.0.45 cpe:/a:apache:http_server:2.0.46 cpe:/a:apache:http_server:2.0.47 cpe:/a:apache:http_server:2.0.48 cpe:/a:apache:http_server:2.0.49 cpe:/a:mandrakesoft:mandrake_multi_network_firewall:8.2 cpe:/a:mod_ssl:mod_ssl:2.8.7 cpe:/a:mod_ssl:mod_ssl:2.8.10 cpe:/a:mod_ssl:mod_ssl:2.8.12 cpe:/a:mod_ssl:mod_ssl:2.8.15 cpe:/a:mod_ssl:mod_ssl:2.8.16 cpe:/a:sgi:propack:2.4 cpe:/a:tinysofa:tinysofa_enterprise_server:1.0 cpe:/a:tinysofa:tinysofa_enterprise_server:1.0_u1 cpe:/o:gentoo:linux:1.4 cpe:/o:mandrakesoft:mandrake_linux:9.1 cpe:/o:mandrakesoft:mandrake_linux:9.1::ppc cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:9.2::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1::x86_64 cpe:/o:openbsd:openbsd:3.4 cpe:/o:openbsd:openbsd:3.5 cpe:/o:openbsd:openbsd:current cpe:/o:trustix:secure_linux:1.5 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1

CVE-2004-0488

2004-07-07T00:00:00.000-04:00

2017-10-10T21:29:26.357-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SGI 20040605-01-U FULLDISC 20040517 mod_ssl ssl_util_uuencode_binary potential problem BUGTRAQ 20040527 [OpenPKG-SA-2004.026] OpenPKG Security Advisory (apache) BUGTRAQ 20040601 TSSA-2004-008 - apache HP SSRT4777 HP SSRT4788 REDHAT RHSA-2004:245 GENTOO GLSA-200406-05 DEBIAN DSA-532 MANDRAKE MDKSA-2004:054 MANDRAKE MDKSA-2004:055 REDHAT RHSA-2004:342 REDHAT RHSA-2004:405 REDHAT RHSA-2005:816 BID 10355 TRUSTIX 2004-0031 FEDORA FLSA:1888 XF apache-modssl-uuencode-bo(16214) MLIST [httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html MLIST [httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html Stack-based buffer overflow in the ssl_util_uuencode_binary function in ssl_util.c for Apache mod_ssl, when mod_ssl is configured to trust the issuing CA, may allow remote attackers to execute arbitrary code via a client certificate with a long subject DN.

cpe:/o:apple:mac_os_x:10.3.3

CVE-2004-0489

2004-07-07T00:00:00.000-04:00

2017-07-10T21:30:12.353-04:00

7.6

NETWORK

HIGH

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20040524 SSH URI handler remote arbitrary code execution MISC http://www.insecure.ws/article.php?story=200405222251133 XF macos-ssh-code-execution(16242) Argument injection vulnerability in the SSH URI handler for Safari on Mac OS 10.3.3 and earlier allows remote attackers to (1) execute arbitrary code via the ProxyCommand option or (2) conduct port forwarding via the -R option.

cpe:/a:cpanel:cpanel:5.0 cpe:/a:cpanel:cpanel:5.3 cpe:/a:cpanel:cpanel:6.0 cpe:/a:cpanel:cpanel:6.2 cpe:/a:cpanel:cpanel:6.4 cpe:/a:cpanel:cpanel:6.4.1 cpe:/a:cpanel:cpanel:6.4.2 cpe:/a:cpanel:cpanel:6.4.2_stable_48 cpe:/a:cpanel:cpanel:7.0 cpe:/a:cpanel:cpanel:8.0 cpe:/a:cpanel:cpanel:9.0 cpe:/a:cpanel:cpanel:9.1 cpe:/a:cpanel:cpanel:9.1.0_r85

CVE-2004-0490

2004-08-18T00:00:00.000-04:00

2017-07-10T21:30:12.400-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://bugzilla.cpanel.net/show_bug.cgi?id=283 CONFIRM http://bugzilla.cpanel.net/show_bug.cgi?id=664 MISC http://www.a-squad.com/audit/explain10.html MISC http://www.securiteam.com/tools/5TP0N15CUA.html BUGTRAQ 20040524 cPanel mod_phpsuexec Vulnerability BID 10407 XF cpanel-modphpsuexec-execute-commands(16239) cPanel, when compiling Apache 1.3.29 and PHP with the mod_phpsuexec option, does not set the --enable-discard-path option, which causes php to use the SCRIPT_FILENAME variable to find and execute a script instead of the PATH_TRANSLATED variable, which allows local users to execute arbitrary PHP code as other users via a URL that references the attacker's script after the user's script, which executes the attacker's script with the user's privileges, a different vulnerability than CVE-2004-0529.

cpe:/o:redhat:enterprise_linux:3.0

CVE-2004-0491

2004-12-31T00:00:00.000-05:00

2017-10-10T21:29:26.433-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SGI 20060402-01-U MLIST [linux-kernel] 20040402 Re: disable-cap-mlock REDHAT RHSA-2005:472 BID 13769 The linux-2.4.21-mlock.patch in Red Hat Enterprise Linux 3 does not properly maintain the mlock page count when one process unlocks pages that belong to another process, which allows local users to mlock more memory than specified by the rlimit.

cpe:/a:apache:http_server:1.3.26 cpe:/a:apache:http_server:1.3.27 cpe:/a:apache:http_server:1.3.28 cpe:/a:apache:http_server:1.3.29 cpe:/a:apache:http_server:1.3.31 cpe:/a:hp:virtualvault:11.0.4 cpe:/a:hp:webproxy:2.0 cpe:/a:hp:webproxy:2.1 cpe:/a:ibm:http_server:1.3.26 cpe:/a:ibm:http_server:1.3.26.1 cpe:/a:ibm:http_server:1.3.26.2 cpe:/a:ibm:http_server:1.3.28 cpe:/a:sgi:propack:2.4 cpe:/o:hp:vvos:11.04 cpe:/o:openbsd:openbsd cpe:/o:openbsd:openbsd:3.4 cpe:/o:openbsd:openbsd:3.5

CVE-2004-0492

2004-08-06T00:00:00.000-04:00

2017-10-10T21:29:26.497-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SGI 20040605-01-U BUGTRAQ 20040611 [OpenPKG-SA-2004.029] OpenPKG Security Advisory (apache) HP SSRT090208 REDHAT RHSA-2004:245 FULLDISC 20040610 Buffer overflow in apache mod_proxy,yet still apache much better than windows SUNALERT 101555 SUNALERT 101841 SUNALERT 57628 DEBIAN DSA-525 MISC http://www.guninski.com/modproxy1.html CERT-VN VU#541310 MANDRAKE MDKSA-2004:065 FEDORA FLSA:1737 XF apache-modproxy-contentlength-bo(16387) Heap-based buffer overflow in proxy_util.c for mod_proxy in Apache 1.3.25 to 1.3.31 allows remote attackers to cause a denial of service (process crash) and possibly execute arbitrary code via a negative Content-Length HTTP header field, which causes a large amount of data to be copied.

cpe:/a:apache:http_server:2.0.47 cpe:/a:apache:http_server:2.0.48 cpe:/a:apache:http_server:2.0.49 cpe:/a:ibm:http_server:2.0.42 cpe:/a:ibm:http_server:2.0.42.1 cpe:/a:ibm:http_server:2.0.42.2 cpe:/a:ibm:http_server:2.0.47 cpe:/a:ibm:http_server:2.0.47.1 cpe:/h:avaya:converged_communications_server:2.0 cpe:/h:avaya:s8300:r2.0.0 cpe:/h:avaya:s8500:r2.0.0 cpe:/h:avaya:s8700:r2.0.0 cpe:/o:gentoo:linux:1.4 cpe:/o:trustix:secure_linux:1.5 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1

CVE-2004-0493

2004-08-06T00:00:00.000-04:00

2017-10-10T21:29:26.560-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FULLDISC 20040628 DoS in apache httpd 2.0.49, yet still apache much better than windows BUGTRAQ 20040629 TSSA-2004-012 - apache HP SSRT4777 GENTOO GLSA-200407-03 CONFIRM http://www.apacheweek.com/features/security-20 MISC http://www.guninski.com/httpd1.html MANDRAKE MDKSA-2004:064 REDHAT RHSA-2004:342 BID 10619 TRUSTIX 2004-0039 XF apache-apgetmimeheaderscore-dos(16524) MLIST [httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html MLIST [httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html The ap_get_mime_headers_core function in Apache httpd 2.0.49 allows remote attackers to cause a denial of service (memory exhaustion), and possibly an integer signedness error leading to a heap-based buffer overflow on 64 bit systems, via long header lines with large numbers of space or tab characters.

cpe:/a:avaya:cvlan cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::advanced_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:2.1::workstation_ia64 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:linux_advanced_workstation:2.1::ia64 cpe:/o:redhat:linux_advanced_workstation:2.1::itanium_processor

CVE-2004-0494

2004-11-23T00:00:00.000-05:00

2017-10-10T21:29:26.620-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://rpmfind.net/linux/RPM/suse/9.3/i386/suse/i586/gnome-vfs-1.0.5-816.2.i586.html REDHAT RHSA-2004:373 FEDORA FLSA:1944 XF gnome-vfs-extfs-gain-access(16897) Multiple extfs backend scripts for GNOME virtual file system (VFS) before 1.0.1 may allow remote attackers to perform certain unauthorized actions via a gnome-vfs URI.

cpe:/a:avaya:intuity_audix:::lx cpe:/a:suse:suse_email_server:3.1 cpe:/a:suse:suse_email_server:iii cpe:/a:suse:suse_linux_admin-cd_for_firewall cpe:/a:suse:suse_linux_connectivity_server cpe:/a:suse:suse_linux_database_server cpe:/a:suse:suse_linux_firewall_cd cpe:/a:suse:suse_linux_office_server cpe:/a:suse:suse_office_server cpe:/h:avaya:converged_communications_server:2.0 cpe:/h:avaya:s8300:r2.0.0 cpe:/h:avaya:s8300:r2.0.1 cpe:/h:avaya:s8500:r2.0.0 cpe:/h:avaya:s8500:r2.0.1 cpe:/h:avaya:s8700:r2.0.0 cpe:/h:avaya:s8700:r2.0.1 cpe:/o:avaya:modular_messaging_message_storage_server:s3400 cpe:/o:conectiva:linux:8.0 cpe:/o:conectiva:linux:9.0 cpe:/o:gentoo:linux:1.4 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.4.26 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.6:rc1 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.7:rc1 cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:3.0::advanced_servers cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation cpe:/o:suse:suse_linux:7::enterprise_server cpe:/o:suse:suse_linux:8::enterprise_server cpe:/o:suse:suse_linux:8.0 cpe:/o:suse:suse_linux:8.0::i386 cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1

CVE-2004-0495

2004-08-06T00:00:00.000-04:00

2017-10-10T21:29:26.717-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONECTIVA CLA-2004:845 CONECTIVA CLA-2004:846 FEDORA FEDORA-2004-186 GENTOO GLSA-200407-02 MANDRAKE MDKSA-2004:066 SUSE SUSE-SA:2004:020 REDHAT RHSA-2004:255 REDHAT RHSA-2004:260 BID 10566 XF linux-drivers-gain-privileges(16449) Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool.

cpe:/a:mandrakesoft:mandrake_multi_network_firewall:8.2 cpe:/a:suse:suse_email_server:3 cpe:/a:suse:suse_email_server:3.1 cpe:/a:suse:suse_linux_connectivity_server cpe:/a:suse:suse_linux_database_server cpe:/a:suse:suse_linux_firewall cpe:/a:suse:suse_linux_office_server cpe:/o:gentoo:linux cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:mandrakesoft:mandrake_linux:9.1 cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1 cpe:/o:sun:solaris:9.0::sparc cpe:/o:sun:sunos:5.8 cpe:/o:sun:sunos:5.9 cpe:/o:suse:suse_linux:7::enterprise_server cpe:/o:suse:suse_linux:8::enterprise_server

CVE-2004-0496

2004-12-06T00:00:00.000-05:00

2018-10-30T12:26:23.107-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SUSE SUSE-SA:2004:020 XF linux-gain-privileges(16625) Multiple unknown vulnerabilities in Linux kernel 2.6 allow local users to gain privileges or access kernel memory, a different set of vulnerabilities than those identified in CVE-2004-0495, as found by the Sparse source code checking tool.

cpe:/a:mandrakesoft:mandrake_multi_network_firewall:8.2 cpe:/o:conectiva:linux:10 cpe:/o:gentoo:linux cpe:/o:linux:linux_kernel:2.0 cpe:/o:mandrakesoft:mandrake_linux:9.1 cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1 cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:suse:suse_linux:8.0 cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.1 cpe:/o:trustix:secure_linux:2 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1

CVE-2004-0497

2004-12-06T00:00:00.000-05:00

2017-10-10T21:29:26.777-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONECTIVA CLA-2004:852 MANDRAKE MDKSA-2004:066 SUSE SUSE-SA:2004:020 REDHAT RHSA-2004:354 REDHAT RHSA-2004:360 XF linux-fchown-groupid-modify(16599) Unknown vulnerability in Linux kernel 2.x may allow local users to modify the group ID of files, such as NFS exported files in kernel 2.4.

cpe:/a:stonesoft:firewall_engine:2.2.8

CVE-2004-0498

2004-12-31T00:00:00.000-05:00

2008-09-05T16:38:35.127-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-09-02T09:16:00.000-04:00

MISC http://www.stonesoft.com/support/Security_Advisories/6735.html MISC http://www.uniras.gov.uk/niscc/docs/re-20041026-00956.pdf?lang=en The H.323 protocol agent in StoneSoft firewall engine 2.2.8 and earlier allows remote attackers to cause a denial of service (crash) via crafted H.323 packets.

CVE-2004-0499

2004-12-31T00:00:00.000-05:00

2008-09-10T15:26:43.147-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Notes: none.

cpe:/a:rob_flynn:gaim:0.10 cpe:/a:rob_flynn:gaim:0.10.3 cpe:/a:rob_flynn:gaim:0.50 cpe:/a:rob_flynn:gaim:0.51 cpe:/a:rob_flynn:gaim:0.52 cpe:/a:rob_flynn:gaim:0.53 cpe:/a:rob_flynn:gaim:0.54 cpe:/a:rob_flynn:gaim:0.55 cpe:/a:rob_flynn:gaim:0.56 cpe:/a:rob_flynn:gaim:0.57 cpe:/a:rob_flynn:gaim:0.58 cpe:/a:rob_flynn:gaim:0.59 cpe:/a:rob_flynn:gaim:0.59.1 cpe:/a:rob_flynn:gaim:0.60 cpe:/a:rob_flynn:gaim:0.61 cpe:/a:rob_flynn:gaim:0.62 cpe:/a:rob_flynn:gaim:0.63 cpe:/a:rob_flynn:gaim:0.64 cpe:/a:rob_flynn:gaim:0.65 cpe:/a:rob_flynn:gaim:0.66 cpe:/a:rob_flynn:gaim:0.67 cpe:/a:rob_flynn:gaim:0.68 cpe:/a:rob_flynn:gaim:0.69 cpe:/a:rob_flynn:gaim:0.70 cpe:/a:rob_flynn:gaim:0.71 cpe:/a:rob_flynn:gaim:0.72 cpe:/a:rob_flynn:gaim:0.73 cpe:/a:rob_flynn:gaim:0.74 cpe:/a:rob_flynn:gaim:0.75 cpe:/o:gentoo:linux:1.4 cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:9.2::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64

CVE-2004-0500

2004-09-28T00:00:00.000-04:00

2017-10-10T21:29:26.840-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://gaim.sourceforge.net/security/?id=0 FEDORA FEDORA-2004-278 FEDORA FEDORA-2004-279 GENTOO GLSA-200408-12 GENTOO GLSA-200408-27 MANDRAKE MDKSA-2004:081 SUSE SUSE-SA:2004:025 REDHAT RHSA-2004:400 BID 10865 XF gaim-msn-bo(16920) Buffer overflow in the MSN protocol plugins (1) object.c and (2) slp.c for Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via MSNSLP protocol messages that are not properly handled in a strncpy call.

cpe:/a:microsoft:outlook:2003

CVE-2004-0501

2004-08-18T00:00:00.000-04:00

2017-07-10T21:30:12.900-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040511 PING: Outlook 2003 Spam BUGTRAQ 20040604 RE: PING: Outlook 2003 Spam NTBUGTRAQ 20040604 RE: PING: Outlook 2003 Spam BID 10323 XF outlook-vml-obtain-information(16116) Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a remote site via an HTML e-mail message containing a Vector Markup Language (VML) entity whose src parameter points to the remote site, which could allow remote attackers to know when a message has been read, verify valid e-mail addresses, and possibly leak other information.

cpe:/a:microsoft:outlook:2003

CVE-2004-0502

2004-08-18T00:00:00.000-04:00

2017-07-10T21:30:12.963-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040509 OUTLOOK 2003: OuchLook BUGTRAQ 20040604 RE: PING: Outlook 2003 Spam NTBUGTRAQ 20040604 RE: PING: Outlook 2003 Spam BID 10307 XF outlook-file-location-predictable(16104) Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an img tag of the original message, which allows remote attackers to bypass zone restrictions and exploit other issues that rely on predictable locations, as demonstrated using a shell: URI.

cpe:/a:microsoft:outlook:2003

CVE-2004-0503

2004-08-18T00:00:00.000-04:00

2017-07-10T21:30:13.010-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20040517 ROCKET SCIENCE: Outllook 2003 BUGTRAQ 20040517 ROCKET SCIENCE: Outllook 2003 BID 10369 XF outlook-ole-restriction-bypass(16173) Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text Format (RTF) message containing an OLE object for the Windows Media Player, which bypasses Media Player's setting to disallow scripting and may lead to unprompted installation of an executable when exploited in conjunction with predictable-file-location exposures such as CVE-2004-0502.

cpe:/a:ethereal_group:ethereal:0.10.1 cpe:/a:ethereal_group:ethereal:0.10.2 cpe:/a:ethereal_group:ethereal:0.10.3 cpe:/a:sgi:propack:2.4 cpe:/a:sgi:propack:3.0

CVE-2004-0504

2004-08-18T00:00:00.000-04:00

2017-10-10T21:29:26.917-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SGI 20040604-01-U SGI 20040605-01-U CONECTIVA CLA-2005:916 GENTOO GLSA-200406-01 SECTRACK 1010158 CIAC O-150 CONFIRM http://www.ethereal.com/appnotes/enpa-sa-00014.html MLIST [Ethereal-users] 20040503 Re: HotSIP sip-messages crasching ethereal REDHAT RHSA-2004:234 BID 10347 XF ethereal-sip-packet-dos(16148) Ethereal 0.10.3 allows remote attackers to cause a denial of service (crash) via certain SIP messages between Hotsip servers and clients.

cpe:/a:ethereal_group:ethereal:0.10.1 cpe:/a:ethereal_group:ethereal:0.10.2 cpe:/a:ethereal_group:ethereal:0.10.3 cpe:/a:sgi:propack:2.4 cpe:/a:sgi:propack:3.0

CVE-2004-0505

2004-08-18T00:00:00.000-04:00

2017-10-10T21:29:26.997-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SGI 20040604-01-U SGI 20040605-01-U CONECTIVA CLA-2005:916 GENTOO GLSA-200406-01 SECTRACK 1010158 CIAC O-150 CONFIRM http://www.ethereal.com/appnotes/enpa-sa-00014.html REDHAT RHSA-2004:234 BID 10347 XF ethereal-aim-dissector-dos(16150) The AIM dissector in Ethereal 0.10.3 allows remote attackers to cause a denial of service (assert error) via unknown attack vectors.

cpe:/a:ethereal_group:ethereal:0.10.1 cpe:/a:ethereal_group:ethereal:0.10.2 cpe:/a:ethereal_group:ethereal:0.10.3 cpe:/a:sgi:propack:2.4 cpe:/a:sgi:propack:3.0

CVE-2004-0506

2004-08-18T00:00:00.000-04:00

2017-10-10T21:29:27.073-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SGI 20040604-01-U SGI 20040605-01-U CONECTIVA CLA-2005:916 GENTOO GLSA-200406-01 SECTRACK 1010158 CIAC O-150 CONFIRM http://www.ethereal.com/appnotes/enpa-sa-00014.html REDHAT RHSA-2004:234 BID 10347 XF ethereal-spnego-dos(16151) The SPNEGO dissector in Ethereal 0.9.8 to 0.10.3 allows remote attackers to cause a denial of service (crash) via unknown attack vectors that cause a null pointer dereference.

cpe:/a:ethereal_group:ethereal:0.10.1 cpe:/a:ethereal_group:ethereal:0.10.2 cpe:/a:ethereal_group:ethereal:0.10.3 cpe:/a:sgi:propack:2.4 cpe:/a:sgi:propack:3.0

CVE-2004-0507

2004-08-18T00:00:00.000-04:00

2017-10-10T21:29:27.153-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SGI 20040604-01-U SGI 20040605-01-U CONECTIVA CLA-2005:916 REDHAT RHSA-2004:234 GENTOO GLSA-200406-01 SECTRACK 1010158 CIAC O-150 CONFIRM http://www.ethereal.com/appnotes/enpa-sa-00014.html BID 10347 XF ethereal-mmse-bo(16152) Buffer overflow in the MMSE dissector for Ethereal 0.10.1 to 0.10.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code.

cpe:/o:sco:openserver:5.0.6 cpe:/o:sco:openserver:5.0.6a cpe:/o:sco:openserver:5.0.7

CVE-2004-0510

2004-12-23T00:00:00.000-05:00

2017-07-10T21:30:13.340-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SCO SCOSA-2004.7 BUGTRAQ 20041027 MMDF deliver local root exploit for SCO OpenServer 5.0.7 x86 MISC http://www.deprotect.com/advisories/DEPROTECT-20040206.txt BID 10758 XF openserver-mmdf-bo(16738) Multiple buffer overflows in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to execute arbitrary code, as demonstrated via the execmail program.

cpe:/o:sco:openserver:5.0.6 cpe:/o:sco:openserver:5.0.6a cpe:/o:sco:openserver:5.0.7

CVE-2004-0511

2004-12-23T00:00:00.000-05:00

2017-07-10T21:30:13.400-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov SCO SCOSA-2004.7 BID 10758 XF openserver-mmdf-name-dos(16739) Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to cause a denial of service by triggering a null dereference.

cpe:/o:sco:openserver:5.0.6 cpe:/o:sco:openserver:5.0.6a cpe:/o:sco:openserver:5.0.7

CVE-2004-0512

2004-12-23T00:00:00.000-05:00

2017-07-10T21:30:13.463-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov SCO SCOSA-2004.7 BID 10758 XF openserver-mmdf-dos(16740) Multiple unknown vulnerabilities in MMDF on OpenServer 5.0.6 and 5.0.7, and possibly other operating systems, may allow attackers to cause a denial of service by triggering a core dump.

cpe:/o:apple:mac_os_x:10.3.4

CVE-2004-0513

2004-08-18T00:00:00.000-04:00

2017-07-10T21:30:13.527-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2004-05-28 BID 10432 SECTRACK 1010329 XF macosx-nfs-logging(16291) Unspecified vulnerability in Mac OS X before 10.3.4 has unknown impact and attack vectors related to "logging when tracing system calls."

CVE-2004-0514

2004-08-18T00:00:00.000-04:00

2017-07-10T21:30:13.573-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2004-05-28 SECTRACK 1010330 CERT-VN VU#174790 BID 10432 XF macosx-loginwindow-gain-privileges(16289) Unknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to "handling of directory services lookups."

CVE-2004-0515

2004-08-18T00:00:00.000-04:00

2017-07-10T21:30:13.637-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

APPLE APPLE-SA-2004-05-28 SECTRACK 1010330 BID 10432 XF macosx-loginwindow-gain-privileges(16289) Unknown vulnerability in LoginWindow for Mac OS X 10.3.4, related to "handling of console log files."

CVE-2004-0516

2004-08-18T00:00:00.000-04:00

2017-07-10T21:30:13.697-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

APPLE APPLE-SA-2004-05-28 SECTRACK 1010331 BID 10432 XF macosx-package-installation(16290) Unknown vulnerability in Mac OS X 10.3.4, related to "package installation scripts," a different vulnerability than CVE-2004-0517.

CVE-2004-0517

2004-08-18T00:00:00.000-04:00

2017-07-10T21:30:13.747-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

APPLE APPLE-SA-2004-05-28 SECTRACK 1010331 BID 10432 XF macosx-package-installation(16290) Unknown vulnerability in Mac OS X 10.3.4, related to "handling of process IDs during package installation," a different vulnerability than CVE-2004-0516.

CVE-2004-0518

2004-08-18T00:00:00.000-04:00

2017-07-10T21:30:13.807-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

APPLE APPLE-SA-2004-05-28 SECTRACK 1010333 XF applefileserver-reporting-error(16288) Unknown vulnerability in AppleFileServer for Mac OS X 10.3.4, related to "the use of SSH and reporting errors," has unknown impact and attack vectors.

cpe:/a:sgi:propack:3.0 cpe:/a:squirrelmail:squirrelmail:1.0.4 cpe:/a:squirrelmail:squirrelmail:1.0.5 cpe:/a:squirrelmail:squirrelmail:1.2.0 cpe:/a:squirrelmail:squirrelmail:1.2.1 cpe:/a:squirrelmail:squirrelmail:1.2.2 cpe:/a:squirrelmail:squirrelmail:1.2.3 cpe:/a:squirrelmail:squirrelmail:1.2.4 cpe:/a:squirrelmail:squirrelmail:1.2.5 cpe:/a:squirrelmail:squirrelmail:1.2.6 cpe:/a:squirrelmail:squirrelmail:1.2.7 cpe:/a:squirrelmail:squirrelmail:1.2.8 cpe:/a:squirrelmail:squirrelmail:1.2.9 cpe:/a:squirrelmail:squirrelmail:1.2.10 cpe:/a:squirrelmail:squirrelmail:1.2.11 cpe:/a:squirrelmail:squirrelmail:1.4 cpe:/a:squirrelmail:squirrelmail:1.4.1 cpe:/a:squirrelmail:squirrelmail:1.4.2

CVE-2004-0519

2004-08-18T00:00:00.000-04:00

2017-10-10T21:29:27.230-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SGI 20040604-01-U CONECTIVA CLA-2004:858 BUGTRAQ 20040429 SquirrelMail Cross Scripting Attacks.... REDHAT RHSA-2004:240 GENTOO GLSA-200405-16 DEBIAN DSA-535 SUSE SUSE-SR:2005:019 FEDORA FEDORA-2004-160 BUGTRAQ 20040430 Re: SquirrelMail Cross Scripting Attacks.... BID 10246 FEDORA FEDORA-2004-1733 XF squirrel-composephp-xss(16025) Multiple cross-site scripting (XSS) vulnerabilities in SquirrelMail 1.4.2 allow remote attackers to execute arbitrary script as other users and possibly steal authentication information via multiple attack vectors, including the mailbox parameter in compose.php.

cpe:/a:open_webmail:open_webmail:2.30 cpe:/a:open_webmail:open_webmail:2.31 cpe:/a:open_webmail:open_webmail:2.32 cpe:/a:sgi:propack:3.0 cpe:/a:squirrelmail:squirrelmail:1.2.0 cpe:/a:squirrelmail:squirrelmail:1.2.1 cpe:/a:squirrelmail:squirrelmail:1.2.2 cpe:/a:squirrelmail:squirrelmail:1.2.3 cpe:/a:squirrelmail:squirrelmail:1.2.4 cpe:/a:squirrelmail:squirrelmail:1.2.5 cpe:/a:squirrelmail:squirrelmail:1.2.6 cpe:/a:squirrelmail:squirrelmail:1.2.7 cpe:/a:squirrelmail:squirrelmail:1.2.8 cpe:/a:squirrelmail:squirrelmail:1.2.9 cpe:/a:squirrelmail:squirrelmail:1.2.10 cpe:/a:squirrelmail:squirrelmail:1.2.11 cpe:/a:squirrelmail:squirrelmail:1.4 cpe:/a:squirrelmail:squirrelmail:1.4.1 cpe:/a:squirrelmail:squirrelmail:1.4.2 cpe:/a:squirrelmail:squirrelmail:1.4.3_rc1 cpe:/a:squirrelmail:squirrelmail:1.5_dev

CVE-2004-0520

2004-08-18T00:00:00.000-04:00

2017-10-10T21:29:27.327-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SGI 20040604-01-U CONECTIVA CLA-2004:858 BUGTRAQ 20040530 RS-2004-1: SquirrelMail "Content-Type" XSS vulnerability MLIST [squirrelmail-cvs] 20040523 [SM-CVS] CVS: squirrelmail/functions mime.php,1.265.2.27,1.265.2.28 REDHAT RHSA-2004:240 DEBIAN DSA-535 GENTOO GLSA-200406-08 MISC http://www.rs-labs.com/adv/RS-Labs-Advisory-2004-1.txt FEDORA FEDORA-2004-160 BID 10439 FEDORA FEDORA-2004-1733 Cross-site scripting (XSS) vulnerability in mime.php for SquirrelMail before 1.4.3 allows remote attackers to insert arbitrary HTML and script via the content-type mail header, as demonstrated using read_body.php.

CVE-2004-0521

2004-08-18T00:00:00.000-04:00

2017-10-10T21:29:27.417-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SGI 20040604-01-U CONECTIVA CLA-2004:858 MLIST [squirrelmail-cvs] 20040427 [SM-CVS] CVS: squirrelmail/functions abook_database.php,1.15.2.1,1.15.2.2 MLIST [squirrelmail-devel] 20040511 [SM-DEVEL] SquirrelMail 1.4.3-RC1 Release REDHAT RHSA-2004:240 GENTOO GLSA-200405-16 CIAC O-212 DEBIAN DSA-535 FEDORA FEDORA-2004-160 APPLE APPLE-SA-2004-09-07 BID 10397 FEDORA FEDORA-2004-1733 XF squirrelmail-sql-injection(16235) SQL injection vulnerability in SquirrelMail before 1.4.3 RC1 allows remote attackers to execute unauthorized SQL statements, with unknown impact, probably via abook_database.php.

cpe:/a:gallery_project:gallery:1.4 cpe:/a:gallery_project:gallery:1.4.1 cpe:/a:gallery_project:gallery:1.4.2 cpe:/a:gallery_project:gallery:1.4.3_pl1 cpe:/a:gallery_project:gallery:1.4_pl1 cpe:/a:gallery_project:gallery:1.4_pl2 cpe:/o:debian:debian_linux:3.0 cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::hppa cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::sparc

CVE-2004-0522

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:14.027-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

GENTOO GLSA-200406-10 DEBIAN DSA-512 BID 10451 XF gallery-user-bypass-authentication(16301) Gallery 1.4.3 and earlier allows remote attackers to bypass authentication and obtain Gallery administrator privileges.

cpe:/a:mit:kerberos:1.0 cpe:/a:mit:kerberos:1.0.8 cpe:/a:mit:kerberos:1.2.2.beta1 cpe:/a:mit:kerberos:5-1.1 cpe:/a:mit:kerberos:5-1.2 cpe:/a:mit:kerberos:5-1.2.1 cpe:/a:mit:kerberos:5-1.2.2 cpe:/a:mit:kerberos:5-1.2.3 cpe:/a:mit:kerberos:5-1.2.4 cpe:/a:mit:kerberos:5-1.2.5 cpe:/a:mit:kerberos:5-1.2.6 cpe:/a:mit:kerberos:5-1.2.7 cpe:/a:mit:kerberos:5-1.3 cpe:/a:mit:kerberos:5-1.3:alpha1 cpe:/a:mit:kerberos:5_1.0 cpe:/a:mit:kerberos:5_1.0.6 cpe:/a:mit:kerberos:5_1.1 cpe:/a:mit:kerberos:5_1.1.1 cpe:/a:mit:kerberos:5_1.2:beta1 cpe:/a:mit:kerberos:5_1.2:beta2 cpe:/a:mit:kerberos:5_1.3.3 cpe:/a:sgi:propack:2.4 cpe:/a:sgi:propack:3.0 cpe:/a:sun:seam:1.0 cpe:/a:sun:seam:1.0.1 cpe:/a:sun:seam:1.0.2 cpe:/a:tinysofa:tinysofa_enterprise_server:1.0 cpe:/a:tinysofa:tinysofa_enterprise_server:1.0_u1 cpe:/o:sun:solaris:8.0::x86 cpe:/o:sun:solaris:9.0::sparc cpe:/o:sun:solaris:9.0::x86 cpe:/o:sun:sunos:5.8

CVE-2004-0523

2004-08-18T00:00:00.000-04:00

2018-10-30T12:25:37.090-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SGI 20040604-01-U SGI 20040605-01-U CONECTIVA CLA-2004:860 FEDORA FEDORA-2004-149 BUGTRAQ 20040601 MITKRB5-SA-2004-001: buffer overflows in krb5_aname_to_localname BUGTRAQ 20040602 TSSA-2004-009 - kerberos5 TRUSTIX 2004-0032 SUNALERT 101512 DEBIAN DSA-520 GENTOO GLSA-200406-21 CERT-VN VU#686862 MANDRAKE MDKSA-2004:056 REDHAT RHSA-2004:236 BID 10448 XF Kerberos-krb5anametolocalname-bo(16268) Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root.

CVE-2004-0524

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:14.167-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040417 Squirrelmail Chpasswod bof BUGTRAQ 20040427 Re: Squirrelmail Chpasswod bof BID 10166 CONFIRM http://www.squirrelmail.org/plugin_view.php?id=117 XF squirrelmail-chpasswd-binary-bo(15889) Buffer overflow in the chpasswd command in the Change_passwd plugin before 4.0, as used in SquirrelMail, allows local users to gain root privileges via a long user name.

cpe:/o:hp:integrated_lights-out_firmware:1.6a cpe:/o:hp:integrated_lights-out_firmware:1.10 cpe:/o:hp:integrated_lights-out_firmware:1.15 cpe:/o:hp:integrated_lights-out_firmware:1.15a cpe:/o:hp:integrated_lights-out_firmware:1.16a cpe:/o:hp:integrated_lights-out_firmware:1.20a cpe:/o:hp:integrated_lights-out_firmware:1.26a cpe:/o:hp:integrated_lights-out_firmware:1.27a cpe:/o:hp:integrated_lights-out_firmware:1.40a cpe:/o:hp:integrated_lights-out_firmware:1.41a cpe:/o:hp:integrated_lights-out_firmware:1.42a cpe:/o:hp:integrated_lights-out_firmware:1.50 cpe:/o:hp:integrated_lights-out_firmware:1.50a cpe:/o:hp:integrated_lights-out_firmware:1.51a

CVE-2004-0525

2004-08-06T00:00:00.000-04:00

2018-10-30T12:26:20.200-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov HP SSRT4724 BID 10415 XF ilo-port-zero-dos(16251) HP Integrated Lights-Out (iLO) 1.10 and other versions before 1.55 allows remote attackers to cause a denial of service (hang) by accessing iLO using the TCP/IP reserved port zero.

cpe:/a:microsoft:ie:5.0 cpe:/a:microsoft:ie:5.0.1 cpe:/a:microsoft:ie:5.0.1:sp1 cpe:/a:microsoft:ie:5.0.1:sp2 cpe:/a:microsoft:ie:5.0.1:sp3 cpe:/a:microsoft:ie:5.0.1:sp4 cpe:/a:microsoft:ie:5.5 cpe:/a:microsoft:ie:5.5:sp1 cpe:/a:microsoft:ie:5.5:sp2 cpe:/a:microsoft:ie:6.0 cpe:/a:microsoft:ie:6.0:sp1 cpe:/a:microsoft:outlook:97 cpe:/a:microsoft:outlook:98 cpe:/a:microsoft:outlook:2000 cpe:/a:microsoft:outlook:2000:sp2 cpe:/a:microsoft:outlook:2000:sp3 cpe:/a:microsoft:outlook:2000:sr1 cpe:/a:microsoft:outlook:2002 cpe:/a:microsoft:outlook:2002:sp1 cpe:/a:microsoft:outlook:2002:sp2 cpe:/a:microsoft:outlook:2002:sp3 cpe:/a:microsoft:outlook:2003 cpe:/a:microsoft:outlook_express:4.0 cpe:/a:microsoft:outlook_express:4.01:sp2 cpe:/a:microsoft:outlook_express:4.27.3110 cpe:/a:microsoft:outlook_express:4.72.2106 cpe:/a:microsoft:outlook_express:4.72.3120.0 cpe:/a:microsoft:outlook_express:4.72.3612 cpe:/a:microsoft:outlook_express:5.0 cpe:/a:microsoft:outlook_express:5.0.1 cpe:/a:microsoft:outlook_express:5.5 cpe:/a:microsoft:outlook_express:6.0

CVE-2004-0526

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:14.277-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040517 Microsoft Internet Explorer ImageMap URL Spoof Vulnerability BUGTRAQ 20040510 DEEP SEA PHISHING: Internet Explorer / Outlook Express MISC http://www.kurczaba.com/securityadvisories/0405132poc.htm BID 10308 XF ie-ahref-url-spoofing(16102) Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.

cpe:/a:kde:konqueror:2.1.1 cpe:/a:kde:konqueror:2.2.2 cpe:/a:kde:konqueror:3.0 cpe:/a:kde:konqueror:3.0.1 cpe:/a:kde:konqueror:3.0.2 cpe:/a:kde:konqueror:3.0.3 cpe:/a:kde:konqueror:3.0.5 cpe:/a:kde:konqueror:3.1 cpe:/a:kde:konqueror:3.1.1 cpe:/a:kde:konqueror:3.1.2 cpe:/a:kde:konqueror:3.1.3 cpe:/a:kde:konqueror:3.2.1

CVE-2004-0527

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:14.323-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 10383 XF ie-ahref-url-spoofing(16102) KDE Konqueror 2.1.1 and 2.2.2 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.

cpe:/a:netscape:navigator:7.1

CVE-2004-0528

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:14.370-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BID 10389 XF ie-ahref-url-spoofing(16102) Netscape Navigator 7.1 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.

cpe:/a:cluecentral:suexec.patch

CVE-2004-0529

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:14.433-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://bugzilla.cpanel.net/show_bug.cgi?id=668 BUGTRAQ 20040605 cPanel mod_php suEXEC Taint Vulnerability SECTRACK 1010411 BID 10478 XF cpanel-suexec-command-execute(16347) The modified suexec program in cPanel, when configured for mod_php and compiled for Apache 1.3.31 and earlier without mod_phpsuexec, allows local users to execute untrusted shared scripts and gain privileges, as demonstrated using untainted scripts such as (1) proftpdvhosts or (2) addalink.cgi, a different vulnerability than CVE-2004-0490.

CVE-2004-0530

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:14.480-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BID 10461 SLACKWARE SSA:2004-154 XF linux-php-gain-privileges(16310) The PHP package in Slackware 8.1, 9.0, and 9.1, when linked against a static library, includes /tmp in the search path, which allows local users to execute arbitrary code as the PHP user by inserting shared libraries into the appropriate path.

cpe:/a:businessobjects:infoview:5.1.4 cpe:/a:businessobjects:infoview:5.1.5 cpe:/a:businessobjects:infoview:5.1.6 cpe:/a:businessobjects:infoview:5.1.7 cpe:/a:businessobjects:infoview:5.1.8 cpe:/a:businessobjects:webintelligence:2.7 cpe:/a:businessobjects:webintelligence:2.7.1 cpe:/a:businessobjects:webintelligence:2.7.2 cpe:/a:businessobjects:webintelligence:2.7.3 cpe:/a:businessobjects:webintelligence:2.7.4

CVE-2004-0533

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:14.527-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov VULNWATCH 20040917 Corsaire Security Advisory - Business Objects WebIntelligence arbitrary document deletion issue FULLDISC 20040907 Corsaire Security Advisory - Business Objects WebIntelligence arbitrary document deletion issue BID 11208 XF webintelligence-url-delete-files(17422) Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary files on the server via a crafted delete request using the InfoView web client.

CVE-2004-0534

2004-09-17T00:00:00.000-04:00

2017-07-10T21:30:14.590-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov VULNWATCH 20040917 Corsaire Security Advisory - Business Objects WebIntelligence XSS issue FULLDISC 20040907 Corsaire Security Advisory - Business Objects WebIntelligence XSS issue BID 11209 XF webintelligence-input-document-xss(17419) Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows remote attackers to inject arbitrary web script or HTML via document names when uploading a document.

cpe:/a:mandrakesoft:mandrake_multi_network_firewall:8.2 cpe:/a:suse:suse_email_server:3.1 cpe:/a:suse:suse_email_server:iii cpe:/a:suse:suse_linux_admin-cd_for_firewall cpe:/a:suse:suse_linux_connectivity_server cpe:/a:suse:suse_linux_database_server cpe:/a:suse:suse_linux_firewall_cd cpe:/a:suse:suse_linux_firewall_live-cd cpe:/a:suse:suse_linux_office_server cpe:/a:suse:suse_office_server cpe:/o:conectiva:linux:8.0 cpe:/o:conectiva:linux:9.0 cpe:/o:engardelinux:secure_community:2.0 cpe:/o:engardelinux:secure_linux:1.5::professional cpe:/o:gentoo:linux:1.4 cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.4.0:test1 cpe:/o:linux:linux_kernel:2.4.0:test10 cpe:/o:linux:linux_kernel:2.4.0:test11 cpe:/o:linux:linux_kernel:2.4.0:test12 cpe:/o:linux:linux_kernel:2.4.0:test2 cpe:/o:linux:linux_kernel:2.4.0:test3 cpe:/o:linux:linux_kernel:2.4.0:test4 cpe:/o:linux:linux_kernel:2.4.0:test5 cpe:/o:linux:linux_kernel:2.4.0:test6 cpe:/o:linux:linux_kernel:2.4.0:test7 cpe:/o:linux:linux_kernel:2.4.0:test8 cpe:/o:linux:linux_kernel:2.4.0:test9 cpe:/o:linux:linux_kernel:2.4.1 cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:linux:linux_kernel:2.4.3 cpe:/o:linux:linux_kernel:2.4.4 cpe:/o:linux:linux_kernel:2.4.5 cpe:/o:linux:linux_kernel:2.4.6 cpe:/o:linux:linux_kernel:2.4.7 cpe:/o:linux:linux_kernel:2.4.8 cpe:/o:linux:linux_kernel:2.4.9 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.18::x86 cpe:/o:linux:linux_kernel:2.4.18:pre1 cpe:/o:linux:linux_kernel:2.4.18:pre2 cpe:/o:linux:linux_kernel:2.4.18:pre3 cpe:/o:linux:linux_kernel:2.4.18:pre4 cpe:/o:linux:linux_kernel:2.4.18:pre5 cpe:/o:linux:linux_kernel:2.4.18:pre6 cpe:/o:linux:linux_kernel:2.4.18:pre7 cpe:/o:linux:linux_kernel:2.4.18:pre8 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.19:pre1 cpe:/o:linux:linux_kernel:2.4.19:pre2 cpe:/o:linux:linux_kernel:2.4.19:pre3 cpe:/o:linux:linux_kernel:2.4.19:pre4 cpe:/o:linux:linux_kernel:2.4.19:pre5 cpe:/o:linux:linux_kernel:2.4.19:pre6 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.21:pre1 cpe:/o:linux:linux_kernel:2.4.21:pre4 cpe:/o:linux:linux_kernel:2.4.21:pre7 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.23:pre9 cpe:/o:linux:linux_kernel:2.4.23_ow2 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.24_ow1 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.4.26 cpe:/o:linux:linux_kernel:2.4.27:pre1 cpe:/o:mandrakesoft:mandrake_linux:9.1 cpe:/o:mandrakesoft:mandrake_linux:9.1::ppc cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:9.2::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1::x86_64 cpe:/o:suse:suse_linux:7::enterprise_server cpe:/o:suse:suse_linux:8::enterprise_server cpe:/o:suse:suse_linux:8.0 cpe:/o:suse:suse_linux:8.0::i386 cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1

CVE-2004-0535

2004-08-06T00:00:00.000-04:00

2017-10-10T21:29:27.607-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SGI 20040804-01-U CONFIRM http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=125168 CONECTIVA CLA-2004:845 FEDORA FEDORA-2004-186 GENTOO GLSA-200407-02 CONFIRM http://www.kernel.org/pub/linux/kernel/v2.4/testing/patch-2.4.27.log MANDRAKE MDKSA-2004:062 SUSE SUSE-SA:2004:020 REDHAT RHSA-2004:413 REDHAT RHSA-2004:418 BID 10352 XF linux-e1000-bo(16159) The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory. NOTE: this issue was originally incorrectly reported as a "buffer overflow" by some sources.

cpe:/a:tripwire:tripwire:2.2.1 cpe:/a:tripwire:tripwire:2.3.0 cpe:/a:tripwire:tripwire:2.3.1 cpe:/a:tripwire:tripwire:2.3.1.2 cpe:/a:tripwire:tripwire:2.4.0 cpe:/a:tripwire:tripwire:2.4.2 cpe:/a:tripwire:tripwire:3.0 cpe:/a:tripwire:tripwire:3.0.1 cpe:/a:tripwire:tripwire:4.0 cpe:/a:tripwire:tripwire:4.0.1 cpe:/a:tripwire:tripwire:4.1

CVE-2004-0536

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:14.713-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040602 Format String Vulnerability in Tripwire BUGTRAQ 20040603 Re: Format String Vulnerability in Tripwire GENTOO GLSA-200406-02 REDHAT RHSA-2004:244 BID 10454 XF tripwire-fprintf-format-string(16309) Format string vulnerability in Tripwire commercial 4.0.1 and earlier, including 2.4, and open source 2.3.1 and earlier, allows local users to gain privileges via format string specifiers in a file name, which is used in the generation of an email report.

cpe:/a:opera_software:opera_web_browser:7.23 cpe:/a:opera_software:opera_web_browser:7.50

CVE-2004-0537

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:14.777-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20040603 Phishing for Opera (GM#007-OP) BUGTRAQ 20040603 Phishing for Opera (GM#007-OP) MISC http://security.greymagic.com/security/advisories/gm007-op/ CONFIRM http://www.opera.com/linux/changelogs/751/index.dml BID 10452 XF opera-favicon-spoofing(16307) Opera 7.50 and earlier allows remote web sites to provide a "Shortcut Icon" (favicon) that is wider than expected, which could allow the web sites to spoof a trusted domain and facilitate phishing attacks using a wide icon and extra spaces.

cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3.4 cpe:/o:apple:mac_os_x_server:10.2.8 cpe:/o:apple:mac_os_x_server:10.3.4

CVE-2004-0538

2004-08-06T00:00:00.000-04:00

2017-10-11T21:29:00.383-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

APPLE APPLE-SA-2004-06-07 LaunchServices in Mac OS X 10.3.4 and 10.2.8 automatically registers and executes new applications, which could allow attackers to execute arbitrary code without warning the user.

cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3.4 cpe:/o:apple:mac_os_x_server:10.2.8 cpe:/o:apple:mac_os_x_server:10.3.4

CVE-2004-0539

2004-08-06T00:00:00.000-04:00

2017-10-11T21:29:00.447-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2004-06-07 CERT-VN VU#773190 The "Show in Finder" button in the Safari web browser in Mac OS X 10.3.4 and 10.2.8 may execute downloaded applications, which could allow remote attackers to execute arbitrary code.

cpe:/o:microsoft:windows_2000

CVE-2004-0540

2004-08-06T00:00:00.000-04:00

2008-09-05T16:38:41.783-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

ALLOWS_ADMIN_ACCESS

MSKB 830847 Microsoft Windows 2000, when running in a domain whose Fully Qualified Domain Name (FQDN) is exactly 8 characters long, does not prevent users with expired passwords from logging on to the domain.

cpe:/a:national_science_foundation:squid_web_proxy_cache:2.5_stable cpe:/a:national_science_foundation:squid_web_proxy_cache:3_pre

CVE-2004-0541

2004-08-06T00:00:00.000-04:00

2018-05-02T21:29:25.787-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SGI 20040604-01-U FEDORA FLSA-2006:152809 GENTOO GLSA-200406-13 MISC http://www.idefense.com/application/poi/display?id=107&type=vulnerabilities REDHAT RHSA-2004:242 BID 10500 TRUSTIX 2004-0033 XF squid-ntlm-bo(16360) Buffer overflow in the ntlm_check_auth (NTLM authentication) function for Squid Web Proxy Cache 2.5.x and 3.x, when compiled with NTLM handlers enabled, allows remote attackers to execute arbitrary code via a long password ("pass" variable).

cpe:/a:php:php:4.4.6

CVE-2004-0542

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:14.887-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://www.idefense.com/application/poi/display?id=108 CONFIRM http://www.php.net/release_4_3_7.php XF php-escapeshellarg-execute-command(16331) PHP before 4.3.7 on Win32 platforms does not properly filter all shell metacharacters, which allows local or remote attackers to execute arbitrary code, overwrite files, and access internal environment variables via (1) the "%", "|", or ">" characters to the escapeshellcmd function, or (2) the "%" character to the escapeshellarg function.

cpe:/a:oracle:applications:11.0 cpe:/a:oracle:e-business_suite:11.5.1 cpe:/a:oracle:e-business_suite:11.5.2 cpe:/a:oracle:e-business_suite:11.5.3 cpe:/a:oracle:e-business_suite:11.5.4 cpe:/a:oracle:e-business_suite:11.5.5 cpe:/a:oracle:e-business_suite:11.5.6 cpe:/a:oracle:e-business_suite:11.5.7 cpe:/a:oracle:e-business_suite:11.5.8 cpe:/a:oracle:e-business_suite:11i

CVE-2004-0543

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:14.947-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

VULNWATCH 20040604 Integrigy Security Alert - Multiple SQL Injection Vulnerabilities in Oracle E-Business Suite BUGTRAQ 20040604 Integrigy Security Alert - Multiple SQL Injection Vulnerabilities in Oracle E-Business Suite CONFIRM http://otn.oracle.com/deploy/security/pdf/2004alert67.pdf CIAC O-153 MISC http://www.integrigy.com/alerts/OraAppsSQLInjection.htm CERT-VN VU#961579 BID 10465 CERT TA04-160A XF oracle-ebusiness-sql-injection(16324) Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1 through 11.5.8 allow remote attackers to execute arbitrary SQL procedures and queries.

cpe:/o:ibm:aix:4.3.3 cpe:/o:ibm:aix:5.1 cpe:/o:ibm:aix:5.2

CVE-2004-0544

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:15.010-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CIAC O-131 BID 9905 BID 9906 IBM MSS-OAR-E01-2004.0544 AIXAPAR IY55681 AIXAPAR IY55682 XF aix-putlvcb-bo(15555) XF aix-getlvcb-bo(18317) Multiple buffer overflows in LVM for AIX 5.1 and 5.2 allow local users to gain privileges via the (1) putlvcb or (2) getlvcb commands.

cpe:/o:ibm:aix:5.1 cpe:/o:ibm:aix:5.2

CVE-2004-0545

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:15.073-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CIAC O-131 BID 10230 IBM MSS-OAR-E01-2004.0544 XF aix-lvm-commands-symlink(16011) LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack.

cpe:/a:postgresql:postgresql:7.2.1

CVE-2004-0547

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:15.120-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov DEBIAN DSA-516 MANDRAKE MDKSA-2004:072 XF postgresql-odbc-bo(16329) Buffer overflow in the ODBC driver for PostgreSQL before 7.2.1 allows remote attackers to cause a denial of service (crash).

cpe:/a:gnu:aspell:0.50.5 cpe:/o:gentoo:linux:1.4

CVE-2004-0548

2004-08-06T00:00:00.000-04:00

2016-11-28T14:06:27.410-05:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040608 Aspell 'word-list-compress' stack overflow vulnerability GENTOO GLSA-200406-14 CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinjan2016-2867206.html BID 10497 Multiple stack-based buffer overflows in the word-list-compress functionality in compress.c for Aspell allow local users to execute arbitrary code via a long entry in the wordlist that is not properly handled when using the (1) "c" compress option or (2) "d" decompress option.

cpe:/a:microsoft:ie cpe:/a:microsoft:ie:5.01 cpe:/a:microsoft:ie:5.5 cpe:/a:microsoft:ie:6.0

CVE-2004-0549

2004-08-06T00:00:00.000-04:00

2018-10-12T17:34:36.917-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://62.131.86.111/analysis.htm FULLDISC 20040602 180 Solutions Exploits and Toolbars Hacking Patched Users(I.E Exploits) FULLDISC 20040606 Internet explorer 6 execution of arbitrary code (An analysis of the 180 Solutions Trojan) BUGTRAQ 20040621 IE/0DAY -> Insider Prototype BUGTRAQ 20040628 JS.Scob.Trojan Source Code ... MISC http://umbrella.name/originalvuln/msie/InsiderPrototype/ CERT-VN VU#713878 CERT TA04-163A CERT TA04-184A CERT TA04-212A MS MS04-025 XF ie-location-restriction-bypass(16348) The WebBrowser ActiveX control, or the Internet Explorer HTML rendering engine (MSHTML), as used in Internet Explorer 6, allows remote attackers to execute arbitrary code in the Local Security context by using the showModalDialog method and modifying the location to execute code such as Javascript, as demonstrated using (1) delayed HTTP redirect operations, and an HTTP response with a Location: header containing a "URL:" prepended to a "ms-its" protocol URI, or (2) modifying the location attribute of the window, as exploited by the Download.ject (aka Scob aka Toofer) using the ADODB.Stream object.

cpe:/a:realnetworks:realplayer:10.0

CVE-2004-0550

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:15.247-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

MISC http://www.idefense.com/application/poi/display?id=109&type=vulnerabilities&flashstatus=false XF realplayer-dot-file-bo(16388) Buffer overflow in Real Networks RealPlayer 10 allows remote attackers to execute arbitrary code via a URL with a large number of "." (period) characters.

cpe:/h:cisco:catalyst_2901 cpe:/h:cisco:catalyst_2902 cpe:/h:cisco:catalyst_2926 cpe:/h:cisco:catalyst_2926f cpe:/h:cisco:catalyst_2926gl cpe:/h:cisco:catalyst_2926gs cpe:/h:cisco:catalyst_2926t cpe:/h:cisco:catalyst_2948 cpe:/h:cisco:catalyst_2948-ge-tx cpe:/h:cisco:catalyst_2948g-l3 cpe:/h:cisco:catalyst_2980g cpe:/h:cisco:catalyst_2980g-a cpe:/h:cisco:catalyst_4000 cpe:/h:cisco:catalyst_4500 cpe:/h:cisco:catalyst_4503 cpe:/h:cisco:catalyst_4506 cpe:/h:cisco:catalyst_4507r cpe:/h:cisco:catalyst_4510r cpe:/h:cisco:catalyst_4912g cpe:/h:cisco:catalyst_5000 cpe:/h:cisco:catalyst_6000_ws-svc-nam-1:2.2%281a%29 cpe:/h:cisco:catalyst_6000_ws-svc-nam-1:3.1%281a%29 cpe:/h:cisco:catalyst_6000_ws-svc-nam-2:2.2%281a%29 cpe:/h:cisco:catalyst_6000_ws-svc-nam-2:3.1%281a%29 cpe:/h:cisco:catalyst_6000_ws-x6380-nam:2.1%282%29 cpe:/h:cisco:catalyst_6000_ws-x6380-nam:3.1%281a%29 cpe:/o:cisco:catos:2.1%281%29 cpe:/o:cisco:catos:2.1%282%29 cpe:/o:cisco:catos:2.1%283%29 cpe:/o:cisco:catos:2.1%284%29 cpe:/o:cisco:catos:2.1%285%29 cpe:/o:cisco:catos:2.1%286%29 cpe:/o:cisco:catos:2.1%287%29 cpe:/o:cisco:catos:2.1%288%29 cpe:/o:cisco:catos:2.1%289%29 cpe:/o:cisco:catos:2.1%2810%29 cpe:/o:cisco:catos:2.1%2811%29 cpe:/o:cisco:catos:2.1%2812%29 cpe:/o:cisco:catos:2.2%281%29 cpe:/o:cisco:catos:2.2%282%29 cpe:/o:cisco:catos:2.3%281%29 cpe:/o:cisco:catos:2.4%281%29 cpe:/o:cisco:catos:2.4%282%29 cpe:/o:cisco:catos:2.4%283%29 cpe:/o:cisco:catos:2.4%284%29 cpe:/o:cisco:catos:2.4%285%29 cpe:/o:cisco:catos:2.4%285a%29 cpe:/o:cisco:catos:3.0%287%29 cpe:/o:cisco:catos:3.1%281%29 cpe:/o:cisco:catos:3.1%282%29 cpe:/o:cisco:catos:3.1%282a%29 cpe:/o:cisco:catos:3.2%281%29 cpe:/o:cisco:catos:3.2%281b%29 cpe:/o:cisco:catos:3.2%282%29 cpe:/o:cisco:catos:3.2%283%29 cpe:/o:cisco:catos:3.2%284%29 cpe:/o:cisco:catos:3.2%285%29 cpe:/o:cisco:catos:3.2%286%29 cpe:/o:cisco:catos:3.2%287%29 cpe:/o:cisco:catos:3.2%288%29gdr cpe:/o:cisco:catos:4.1%281%29 cpe:/o:cisco:catos:4.1%282%29 cpe:/o:cisco:catos:4.1%283%29 cpe:/o:cisco:catos:4.2%281%29 cpe:/o:cisco:catos:4.2%282%29 cpe:/o:cisco:catos:4.3%281a%29 cpe:/o:cisco:catos:4.4%281%29 cpe:/o:cisco:catos:4.5%281%29 cpe:/o:cisco:catos:4.5%282%29 cpe:/o:cisco:catos:4.5%283%29 cpe:/o:cisco:catos:4.5%284%29 cpe:/o:cisco:catos:4.5%284b%29 cpe:/o:cisco:catos:4.5%285%29 cpe:/o:cisco:catos:4.5%286%29 cpe:/o:cisco:catos:4.5%286a%29 cpe:/o:cisco:catos:4.5%287%29 cpe:/o:cisco:catos:4.5%288%29 cpe:/o:cisco:catos:4.5%289%29 cpe:/o:cisco:catos:4.5%2810%29 cpe:/o:cisco:catos:4.5%2811%29 cpe:/o:cisco:catos:4.5%2812%29 cpe:/o:cisco:catos:4.5%2812a%29 cpe:/o:cisco:catos:4.5%2813%29 cpe:/o:cisco:catos:4.5%2813a%29 cpe:/o:cisco:catos:4.5%2814%29 cpe:/o:cisco:catos:4.5.10 cpe:/o:cisco:catos:5.1 cpe:/o:cisco:catos:5.1%281%29 cpe:/o:cisco:catos:5.1%281%29csx cpe:/o:cisco:catos:5.1%281a%29 cpe:/o:cisco:catos:5.1%281a%29csx cpe:/o:cisco:catos:5.1%282a%29 cpe:/o:cisco:catos:5.1%282b%29 cpe:/o:cisco:catos:5.2 cpe:/o:cisco:catos:5.2%281%29 cpe:/o:cisco:catos:5.2%281%29csx cpe:/o:cisco:catos:5.2%281a%29 cpe:/o:cisco:catos:5.2%282%29 cpe:/o:cisco:catos:5.2%282%29csx cpe:/o:cisco:catos:5.2%283%29 cpe:/o:cisco:catos:5.2%283%29csx cpe:/o:cisco:catos:5.2%283a%29csx cpe:/o:cisco:catos:5.2%284%29 cpe:/o:cisco:catos:5.2%285%29 cpe:/o:cisco:catos:5.2%286%29 cpe:/o:cisco:catos:5.2%287%29 cpe:/o:cisco:catos:5.2%287a%29 cpe:/o:cisco:catos:5.3%281%29csx cpe:/o:cisco:catos:5.3%281a%29csx cpe:/o:cisco:catos:5.3%282%29csx cpe:/o:cisco:catos:5.3%283%29csx cpe:/o:cisco:catos:5.3%284%29csx cpe:/o:cisco:catos:5.3%285%29csx cpe:/o:cisco:catos:5.3%285a%29csx cpe:/o:cisco:catos:5.3%286%29csx cpe:/o:cisco:catos:5.3%286a%29csx cpe:/o:cisco:catos:5.4 cpe:/o:cisco:catos:5.4%281%29 cpe:/o:cisco:catos:5.4%281%29deferred cpe:/o:cisco:catos:5.4%282%29 cpe:/o:cisco:catos:5.4%282a%29 cpe:/o:cisco:catos:5.4%283%29 cpe:/o:cisco:catos:5.4%284%29 cpe:/o:cisco:catos:5.4%284a%29 cpe:/o:cisco:catos:5.5 cpe:/o:cisco:catos:5.5%281%29 cpe:/o:cisco:catos:5.5%281a%29 cpe:/o:cisco:catos:5.5%282%29 cpe:/o:cisco:catos:5.5%283%29 cpe:/o:cisco:catos:5.5%284%29 cpe:/o:cisco:catos:5.5%284a%29 cpe:/o:cisco:catos:5.5%284b%29 cpe:/o:cisco:catos:5.5%285%29 cpe:/o:cisco:catos:5.5%286%29 cpe:/o:cisco:catos:5.5%286a%29 cpe:/o:cisco:catos:5.5%287%29 cpe:/o:cisco:catos:5.5%287a%29 cpe:/o:cisco:catos:5.5%288%29 cpe:/o:cisco:catos:5.5%288a%29 cpe:/o:cisco:catos:5.5%288a%29cv cpe:/o:cisco:catos:5.5%289%29 cpe:/o:cisco:catos:5.5%2810%29 cpe:/o:cisco:catos:5.5%2810a%29 cpe:/o:cisco:catos:5.5%2811%29 cpe:/o:cisco:catos:5.5%2811a%29 cpe:/o:cisco:catos:5.5%2812%29 cpe:/o:cisco:catos:5.5%2812a%29 cpe:/o:cisco:catos:5.5%2813%29 cpe:/o:cisco:catos:5.5%2813.5%29 cpe:/o:cisco:catos:5.5%2813a%29 cpe:/o:cisco:catos:5.5%2814%29 cpe:/o:cisco:catos:5.5%2815%29 cpe:/o:cisco:catos:5.5%2816%29 cpe:/o:cisco:catos:5.5%2816.2%29 cpe:/o:cisco:catos:5.5%2817%29 cpe:/o:cisco:catos:5.5%2818%29 cpe:/o:cisco:catos:5.5%2819%29 cpe:/o:cisco:catos:6.1 cpe:/o:cisco:catos:6.1%281%29 cpe:/o:cisco:catos:6.1%281a%29 cpe:/o:cisco:catos:6.1%281b%29 cpe:/o:cisco:catos:6.1%281c%29 cpe:/o:cisco:catos:6.1%281d%29 cpe:/o:cisco:catos:6.1%281e%29 cpe:/o:cisco:catos:6.1%282%29 cpe:/o:cisco:catos:6.1%282.13%29 cpe:/o:cisco:catos:6.1%282a%29 cpe:/o:cisco:catos:6.1%283%29 cpe:/o:cisco:catos:6.1%283a%29 cpe:/o:cisco:catos:6.1%284%29 cpe:/o:cisco:catos:6.1%284b%29 cpe:/o:cisco:catos:6.2%280.110%29 cpe:/o:cisco:catos:6.2%280.111%29 cpe:/o:cisco:catos:6.2%281%29 cpe:/o:cisco:catos:6.2%281a%29 cpe:/o:cisco:catos:6.2%282%29 cpe:/o:cisco:catos:6.2%282a%29 cpe:/o:cisco:catos:6.2%283%29 cpe:/o:cisco:catos:6.2%283a%29 cpe:/o:cisco:catos:6.3%280.7%29pan cpe:/o:cisco:catos:6.3%281%29 cpe:/o:cisco:catos:6.3%281a%29 cpe:/o:cisco:catos:6.3%282%29 cpe:/o:cisco:catos:6.3%282a%29 cpe:/o:cisco:catos:6.3%283%29 cpe:/o:cisco:catos:6.3%283%29x cpe:/o:cisco:catos:6.3%283%29x1 cpe:/o:cisco:catos:6.3%283a%29 cpe:/o:cisco:catos:6.3%284%29 cpe:/o:cisco:catos:6.3%284a%29 cpe:/o:cisco:catos:6.3%285%29 cpe:/o:cisco:catos:6.3%285.10%29 cpe:/o:cisco:catos:6.3%286%29 cpe:/o:cisco:catos:6.3%287%29 cpe:/o:cisco:catos:6.3%288%29 cpe:/o:cisco:catos:6.3%288.3%29 cpe:/o:cisco:catos:6.3%289%29 cpe:/o:cisco:catos:6.3%2810%29 cpe:/o:cisco:catos:6.4%281%29 cpe:/o:cisco:catos:6.4%282%29 cpe:/o:cisco:catos:6.4%283%29 cpe:/o:cisco:catos:6.4%284a%29 cpe:/o:cisco:catos:6.4%285%29 cpe:/o:cisco:catos:6.4%286%29 cpe:/o:cisco:catos:6.4%287%29 cpe:/o:cisco:catos:6.4%288%29 cpe:/o:cisco:catos:7.1 cpe:/o:cisco:catos:7.1%281%29 cpe:/o:cisco:catos:7.1%281a%29 cpe:/o:cisco:catos:7.1%282%29 cpe:/o:cisco:catos:7.1%282a%29 cpe:/o:cisco:catos:7.2%280.65%29 cpe:/o:cisco:catos:7.2%281%29 cpe:/o:cisco:catos:7.2%282%29 cpe:/o:cisco:catos:7.3 cpe:/o:cisco:catos:7.3%281%29 cpe:/o:cisco:catos:7.3%282%29 cpe:/o:cisco:catos:7.4 cpe:/o:cisco:catos:7.4%280.2%29clr cpe:/o:cisco:catos:7.4%280.63%29 cpe:/o:cisco:catos:7.4%281%29 cpe:/o:cisco:catos:7.4%282%29 cpe:/o:cisco:catos:7.4%283%29 cpe:/o:cisco:catos:7.5 cpe:/o:cisco:catos:7.5%281%29 cpe:/o:cisco:catos:7.6 cpe:/o:cisco:catos:7.6%281%29 cpe:/o:cisco:catos:7.6%282%29 cpe:/o:cisco:catos:7.6%283%29 cpe:/o:cisco:catos:7.6%284%29 cpe:/o:cisco:catos:7.6%285%29 cpe:/o:cisco:catos:8.1 cpe:/o:cisco:catos:8.1%282%29 cpe:/o:cisco:catos:8.1%283%29 cpe:/o:cisco:catos:8.2 cpe:/o:cisco:catos:8.2%281%29 cpe:/o:cisco:catos:8.3%281%29glx cpe:/o:cisco:catos:8.3glx

CVE-2004-0551

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:15.323-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CISCO 20040609 Cisco CatOS Telnet, HTTP and SSH Vulnerability CERT-VN VU#245190 XF cisco-catalyst-ack-dos(16370) Cisco CatOS 5.x before 5.5(20) through 8.x before 8.2(2) and 8.3(2)GLX, as used in Catalyst switches, allows remote attackers to cause a denial of service (system crash and reload) by sending invalid packets instead of the final ACK portion of the three-way handshake to the (1) Telnet, (2) HTTP, or (3) SSH services, aka "TCP-ACK DoS attack."

cpe:/a:sophos:small_business_suite:1.00

CVE-2004-0552

2004-11-03T00:00:00.000-05:00

2017-07-10T21:30:15.387-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

IDEFENSE 20040922 Sophos Small Business Suite Reserved Device Name Handling Vulnerability MISC http://www.seifried.org/security/advisories/kssa-005.html XF sophos-business-security-bypass(17468) Sophos Small Business Suite 1.00 on Windows does not properly handle files whose names contain reserved MS-DOS device names such as (1) LPT1, (2) COM1, (3) AUX, (4) CON, or (5) PRN, which can allow malicious code to bypass detection when it is installed, copied, or executed.

CVE-2004-0554

2004-08-06T00:00:00.000-04:00

2017-10-10T21:29:28.200-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2004:845 MISC http://gcc.gnu.org/bugzilla/show_bug.cgi?id=15905 MISC http://linuxreviews.org/news/2004-06-11_kernel_crash/index.html FEDORA FEDORA-2004-186 BUGTRAQ 20040620 TSSA-2004-011 - kernel ENGARDE ESA-20040621-005 MLIST [linux-kernel] 20040609 timer + fpu stuff locks my console race GENTOO GLSA-200407-02 DEBIAN DSA-1067 DEBIAN DSA-1069 DEBIAN DSA-1070 DEBIAN DSA-1082 CERT-VN VU#973654 MANDRAKE MDKSA-2004:062 SUSE SuSE-SA:2004:017 REDHAT RHSA-2004:255 REDHAT RHSA-2004:260 BID 10538 TRUSTIX 2004-0034 XF linux-dos(16412) Linux kernel 2.4.x and 2.6.x for x86 allows local users to cause a denial of service (system crash), possibly via an infinite loop that triggers a signal handler with a certain sequence of fsave and frstor instructions, as originally demonstrated using a "crash.c" program.

cpe:/a:gnu:queue:1.12.7 cpe:/a:gnu:queue:1.12.8 cpe:/a:gnu:queue:1.12.9 cpe:/a:gnu:queue:1.20.0 cpe:/a:gnu:queue:1.20.1 cpe:/a:gnu:queue:1.20.2

CVE-2004-0555

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:15.510-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SECTRACK 1012929 DEBIAN DSA-643 XF queue-bo(18945) Buffer overflow in (1) queue.c and (2) queued.c in queue before 1.30.1 may allow remote attackers to execute arbitrary code.

CVE-2004-0556

2017-05-11T10:29:01.743-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

cpe:/a:sox:sox:12.17.2 cpe:/a:sox:sox:12.17.3 cpe:/a:sox:sox:12.17.4 cpe:/o:conectiva:linux:8.0 cpe:/o:conectiva:linux:9.0 cpe:/o:conectiva:linux:10.0 cpe:/o:gentoo:linux:1.4 cpe:/o:redhat:enterprise_linux:3.0::advanced_servers cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:fedora_core:core_1.0 cpe:/o:redhat:fedora_core:core_2.0

CVE-2004-0557

2004-08-06T00:00:00.000-04:00

2017-10-10T21:29:28.277-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

VULNWATCH 20040728 SoX buffer overflows when handling .WAV files CONECTIVA CLA-2004:855 FEDORA FEDORA-2004-235 FEDORA FEDORA-2004-244 FULLDISC 20040728 SoX buffer overflows when handling .WAV files DEBIAN DSA-565 GENTOO GLSA-200407-23 MANDRAKE MDKSA-2004:076 REDHAT RHSA-2004:409 BID 10819 FEDORA FLSA:1945 XF sox-wav-bo(16827) Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields.

cpe:/a:easy_software_products:cups:1.1.21

CVE-2004-0558

2004-09-28T00:00:00.000-04:00

2018-03-12T21:29:00.297-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2004:872 APPLE APPLE-SA-2004-09-30 SCO SCOSA-2004.15 SUNALERT 57646 SUNALERT 201005 SUNALERT 1000757 DEBIAN DSA-545 REDHAT RHSA-2004:449 BID 11183 SUSE SUSE-SA:2004:031 TRUSTIX 2004-0047 FEDORA FLSA:2072 XF cups-udp-dos(17389) MISC https://github.com/fibonascii/CVE-2004-0558 The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang) via a certain UDP packet to the IPP port.

cpe:/a:usermin:usermin:1.000 cpe:/a:usermin:usermin:1.010 cpe:/a:usermin:usermin:1.020 cpe:/a:usermin:usermin:1.030 cpe:/a:usermin:usermin:1.040 cpe:/a:usermin:usermin:1.051 cpe:/a:usermin:usermin:1.060 cpe:/a:usermin:usermin:1.070 cpe:/a:usermin:usermin:1.080 cpe:/a:webmin:webmin:1.0.00 cpe:/a:webmin:webmin:1.0.20 cpe:/a:webmin:webmin:1.0.50 cpe:/a:webmin:webmin:1.0.60 cpe:/a:webmin:webmin:1.0.70 cpe:/a:webmin:webmin:1.0.80 cpe:/a:webmin:webmin:1.0.90 cpe:/a:webmin:webmin:1.1.00 cpe:/a:webmin:webmin:1.1.10 cpe:/a:webmin:webmin:1.1.21 cpe:/a:webmin:webmin:1.1.30 cpe:/a:webmin:webmin:1.1.40 cpe:/a:webmin:webmin:1.1.50 cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:9.2::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1::x86_64

CVE-2004-0559

2004-10-20T00:00:00.000-04:00

2017-07-10T21:30:15.683-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov GENTOO GLSA-200409-15 BID 11153 CONFIRM http://www.webmin.com/uchanges-1.089.html XF usermin-installation-unspecified(17299) The maketemp.pl script in Usermin 1.070 and 1.080 allows local users to overwrite arbitrary files at install time via a symlink attack on the /tmp/.usermin directory.

cpe:/a:university_of_minnesota:gopherd:3.0.3

CVE-2004-0560

2004-12-31T00:00:00.000-05:00

2008-09-05T16:38:45.377-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-15T11:38:00.000-04:00

ALLOWS_USER_ACCESS

DEBIAN DSA-638 Integer overflow in gopher daemon (gopherd) 3.0.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code via crafted content of a certain size that triggers the overflow.

cpe:/a:university_of_minnesota:gopherd:3.0.3

CVE-2004-0561

2004-12-31T00:00:00.000-05:00

2008-09-05T16:38:45.533-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-15T11:39:00.000-04:00

ALLOWS_USER_ACCESS

DEBIAN DSA-638 Format string vulnerability in the log routine for gopher daemon (gopherd) 3.0.3 allows remote attackers to cause a denial of service and possibly execute arbitrary code.

CVE-2004-0562

2017-05-11T10:29:01.760-04:00

2017-05-11T10:29:01.777-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

cpe:/a:freenet6:freenet6:0.9.6 cpe:/a:freenet6:freenet6:1.0

CVE-2004-0563

2004-12-23T00:00:00.000-05:00

2017-07-10T21:30:15.730-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1011460 DEBIAN DSA-555 BID 11280 XF freenet6-world-readable(17544) The tspc.conf configuration file in freenet6 before 0.9.6 and before 1.0 on Debian Linux has world readable permissions, which could allow local users to gain sensitive information, such as a username and password.

cpe:/a:roaring_penguin:pppoe:3.0 cpe:/a:roaring_penguin:pppoe:3.3 cpe:/a:roaring_penguin:pppoe:3.5 cpe:/o:debian:debian_linux:3.0 cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::hppa cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::sparc

CVE-2004-0564

2004-12-23T00:00:00.000-05:00

2017-07-10T21:30:15.777-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MANDRAKE MDKSA-2004:145 BUGTRAQ 20041208 Re: MDKSA-2004:145 - Updated rp-pppoe packages fix vulnerability DEBIAN DSA-557 FEDORA FLSA:152794 BID 11315 XF pppoe-file-overwrite(17576) Roaring Penguin pppoe (rp-ppoe), if installed or configured to run setuid root contrary to its design, allows local users to overwrite arbitrary files. NOTE: the developer has publicly disputed the claim that this is a vulnerability because pppoe "is NOT designed to run setuid-root." Therefore this identifier applies *only* to those configurations and installations under which pppoe is run setuid root despite the developer's warnings.

cpe:/a:mandrakesoft:mandrake_multi_network_firewall:8.2 cpe:/o:gentoo:linux cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:mandrakesoft:mandrake_linux:9.1 cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1 cpe:/o:trustix:secure_linux:2 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1

CVE-2004-0565

2004-12-06T00:00:00.000-05:00

2017-10-10T21:29:28.480-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MLIST [owl-users] 20040619 Linux 2.4.26-ow2 DEBIAN DSA-1067 DEBIAN DSA-1069 DEBIAN DSA-1070 DEBIAN DSA-1082 MANDRAKE MDKSA-2004:066 REDHAT RHSA-2004:504 BID 10687 MISC https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=124734 XF linux-ia64-info-disclosure(16644) Floating point information leak in the context switch code for Linux 2.4.x only checks the MFH bit but does not verify the FPH owner, which allows local users to read register values of other processes by setting the MFH bit.

CVE-2004-0566

2004-07-27T00:00:00.000-04:00

2018-10-12T17:34:38.933-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

FULLDISC 20040215 GAYER THAN AIDS ADVISORY #01: IE 5 remote code execution CERT-VN VU#266926 CERT TA04-212A MS MS04-025 XF ie-bmp-integer-overflow(15210) Integer overflow in imgbmp.cxx for Windows 2000 allows remote attackers to execute arbitrary code via a BMP image with a large bfOffBits value.

cpe:/o:microsoft:windows_2000::sp3 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server:64-bit cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_nt:4.0:sp6:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp6a:server

CVE-2004-0567

2004-12-31T00:00:00.000-05:00

2019-04-30T10:27:13.913-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SECTRACK 1012517 CIAC P-054 CERT-VN VU#378160 BID 11922 MS MS04-045 XF wins-memory-pointer-hijack(18259) The Windows Internet Naming Service (WINS) in Windows NT Server 4.0 SP 6a, NT Terminal Server 4.0 SP 6, Windows 2000 Server SP3 and SP4, and Windows Server 2003 does not properly validate the computer name value in a WINS packet, which allows remote attackers to execute arbitrary code or cause a denial of service (server crash), which results in an "unchecked buffer" and possibly triggers a buffer overflow, aka the "Name Validation Vulnerability."

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2000::sp1 cpe:/o:microsoft:windows_2000::sp2 cpe:/o:microsoft:windows_2000::sp3 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server:datacenter_64-bit:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:enterprise::64-bit cpe:/o:microsoft:windows_2003_server:enterprise:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:enterprise_64-bit cpe:/o:microsoft:windows_2003_server:enterprise_64-bit:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:r2::64-bit cpe:/o:microsoft:windows_2003_server:r2::datacenter_64-bit cpe:/o:microsoft:windows_2003_server:r2:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:standard::64-bit cpe:/o:microsoft:windows_2003_server:standard:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:web cpe:/o:microsoft:windows_2003_server:web:sp1_beta_1 cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0::alpha cpe:/o:microsoft:windows_nt:4.0::enterprise_server cpe:/o:microsoft:windows_nt:4.0::server cpe:/o:microsoft:windows_nt:4.0::terminal_server cpe:/o:microsoft:windows_nt:4.0::terminal_server_alpha cpe:/o:microsoft:windows_nt:4.0::workstation cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp1:alpha cpe:/o:microsoft:windows_nt:4.0:sp1:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp1:server cpe:/o:microsoft:windows_nt:4.0:sp1:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp1:workstation cpe:/o:microsoft:windows_nt:4.0:sp2 cpe:/o:microsoft:windows_nt:4.0:sp2:alpha cpe:/o:microsoft:windows_nt:4.0:sp2:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp2:server cpe:/o:microsoft:windows_nt:4.0:sp2:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp2:workstation cpe:/o:microsoft:windows_nt:4.0:sp3 cpe:/o:microsoft:windows_nt:4.0:sp3:alpha cpe:/o:microsoft:windows_nt:4.0:sp3:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp3:server cpe:/o:microsoft:windows_nt:4.0:sp3:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp3:workstation cpe:/o:microsoft:windows_nt:4.0:sp4 cpe:/o:microsoft:windows_nt:4.0:sp4:alpha cpe:/o:microsoft:windows_nt:4.0:sp4:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp4:server cpe:/o:microsoft:windows_nt:4.0:sp4:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp4:workstation cpe:/o:microsoft:windows_nt:4.0:sp5 cpe:/o:microsoft:windows_nt:4.0:sp5:alpha cpe:/o:microsoft:windows_nt:4.0:sp5:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp5:server cpe:/o:microsoft:windows_nt:4.0:sp5:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp5:workstation cpe:/o:microsoft:windows_nt:4.0:sp6 cpe:/o:microsoft:windows_nt:4.0:sp6:alpha cpe:/o:microsoft:windows_nt:4.0:sp6:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp6:server cpe:/o:microsoft:windows_nt:4.0:sp6:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp6:workstation cpe:/o:microsoft:windows_nt:4.0:sp6a cpe:/o:microsoft:windows_nt:4.0:sp6a:alpha cpe:/o:microsoft:windows_nt:4.0:sp6a:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp6a:server cpe:/o:microsoft:windows_nt:4.0:sp6a:workstation cpe:/o:microsoft:windows_xp:::64-bit cpe:/o:microsoft:windows_xp:::home cpe:/o:microsoft:windows_xp:::media_center cpe:/o:microsoft:windows_xp::gold:professional cpe:/o:microsoft:windows_xp::sp1:64-bit cpe:/o:microsoft:windows_xp::sp1:home cpe:/o:microsoft:windows_xp::sp1:media_center cpe:/o:microsoft:windows_xp::sp2:home cpe:/o:microsoft:windows_xp::sp2:media_center

CVE-2004-0568

2005-01-10T00:00:00.000-05:00

2019-04-30T10:27:13.913-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20041214 HyperTerminal - Buffer Overflow In .ht File MS MS04-043 XF win-hyperterminal-session-bo(18336) HyperTerminal application for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the length of a value that is saved in a session file, which allows remote attackers to execute arbitrary code via a malicious HyperTerminal session file (.ht), web site, or Telnet URL contained in an e-mail message, triggering a buffer overflow.

cpe:/o:microsoft:windows_nt:4.0

CVE-2004-0569

2004-11-03T00:00:00.000-05:00

2018-10-12T17:34:42.573-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20041013 BindView Advisory: Memory Leak and DoS in NT4 RPC server MS MS04-029 XF wins-rpc-obtain-information(17646) XF win-ms04029-patch(17663) The RPC Runtime Library for Microsoft Windows NT 4.0 allows remote attackers to read active memory or cause a denial of service (system crash) via a malicious message, possibly related to improper length values.

CVE-2004-0571

2005-01-10T00:00:00.000-05:00

2019-04-30T10:27:13.913-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MS MS04-041 XF win-converter-table-code-execution(18337) Microsoft Word for Windows 6.0 Converter does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Table Conversion Vulnerability," a different vulnerability than CVE-2004-0901.

cpe:/a:microsoft:grpconv

CVE-2004-0572

2004-11-03T00:00:00.000-05:00

2018-10-12T17:34:45.073-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20040707 Re: shell:windows command question CERT-VN VU#543864 BID 10677 MS MS04-037 XF win-grpconv-bo(16664) XF win-ms04037-patch(17662) Buffer overflow in the Windows Program Group Converter (grpconv.exe) may allow remote attackers to execute arbitrary code via a shell: URL with a long filename and a .grp extension, which is not properly handled when the shell capability launches grpconv.exe.

cpe:/a:microsoft:frontpage:2000 cpe:/a:microsoft:frontpage:2002 cpe:/a:microsoft:frontpage:2003 cpe:/a:microsoft:office:2000 cpe:/a:microsoft:office:2003 cpe:/a:microsoft:office:xp cpe:/a:microsoft:publisher:2000 cpe:/a:microsoft:publisher:2002 cpe:/a:microsoft:publisher:2003 cpe:/a:microsoft:word:2000 cpe:/a:microsoft:word:2002 cpe:/a:microsoft:word:2003 cpe:/a:microsoft:works:2001 cpe:/a:microsoft:works:2002 cpe:/a:microsoft:works:2003 cpe:/a:microsoft:works:2004

CVE-2004-0573

2004-09-28T00:00:00.000-04:00

2018-10-30T12:25:26.903-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040914 Microsoft Office WordPerfect Converter Buffer Overflow Vulnerability SECTRACK 1011249 SECTRACK 1011250 SECTRACK 1011251 SECTRACK 1011252 CERT-VN VU#449438 MS MS04-027 XF wordperfect-converter-message-bo(17306) Buffer overflow in the converter for Microsoft WordPerfect 5.x on Office 2000, Office XP, Office 2003, and Works Suites 2001 through 2004 allows remote attackers to execute arbitrary code via a malicious document or website.

cpe:/a:microsoft:exchange_server:2000 cpe:/a:microsoft:exchange_server:2003 cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_nt:4.0::server

CVE-2004-0574

2004-11-03T00:00:00.000-05:00

2019-04-30T10:27:13.710-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20041012 CORE-2004-0802: IIS NNTP Service XPAT Command Vulnerabilities CIAC P-012 MISC http://www.coresecurity.com/common/showdoc.php?idx=420&idxseccion=10 CERT-VN VU#203126 MS MS04-036 XF win-nntp-bo(17641) XF win-ms04036-patch(17661) The Network News Transfer Protocol (NNTP) component of Microsoft Windows NT Server 4.0, Windows 2000 Server, Windows Server 2003, Exchange 2000 Server, and Exchange Server 2003 allows remote attackers to execute arbitrary code via XPAT patterns, possibly related to improper length validation and an "unchecked buffer," leading to off-by-one and heap-based buffer overflows.

cpe:/o:microsoft:windows_2003_server:64-bit cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_xp:::64-bit cpe:/o:microsoft:windows_xp::gold

CVE-2004-0575

2004-11-03T00:00:00.000-05:00

2018-10-12T17:34:50.747-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20041013 EEYE: Windows Shell ZIP File Decompression DUNZIP32.DLL Buffer Overflow Vulnerability SECTRACK 1011637 CIAC P-010 MISC http://www.eeye.com/html/research/advisories/AD20041012A.html CERT-VN VU#649374 MS MS04-034 XF win-compressed-folders-bo(17624) XF win-ms04034-patch(17659) Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, Windows XP 64-bit Edition, Windows Server 2003, and Windows Server 2003 64-bit Edition allows remote attackers to execute arbitrary code via compressed (zipped) folders that involve an "unchecked buffer" and improper length validation.

cpe:/a:gnu:radius:1.1

CVE-2004-0576

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:16.480-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FULLDISC 20040621 [Full-Disclosure] iDEFENSE Security Advisory 06.21.04 - GNU Radius SNMP Invalid OID Denial of Service Vulnerability MISC http://www.idefense.com/application/poi/display?id=110&type=vulnerabilities XF radius-snmp-oid-dos(16466) The radius daemon (radiusd) for GNU Radius 1.1, when compiled with the -enable-snmp option, allows remote attackers to cause a denial of service (server crash) via malformed SNMP messages containing an invalid OID.

cpe:/a:qbik:wingate:5.0.5 cpe:/a:qbik:wingate:5.2.3 cpe:/a:qbik:wingate:6.0_beta_2

CVE-2004-0577

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:16.527-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20040701 iDEFENSE Security Advisory 07.01.04: WinGate Information Disclosure MISC http://www.idefense.com/application/poi/display?id=113 XF wingate-directory-traversal(16589) WinGate 5.2.3 build 901 and 6.0 beta 2 build 942, and other versions such as 5.0.5, allows remote attackers to read arbitrary files from the root directory via a URL request to the wingate-internal directory.

cpe:/a:qbik:wingate:5.0.5 cpe:/a:qbik:wingate:5.2.3 cpe:/a:qbik:wingate:6.0_beta_2

CVE-2004-0578

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:16.590-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20040701 iDEFENSE Security Advisory 07.01.04: WinGate Information Disclosure MISC http://www.idefense.com/application/poi/display?id=113 XF wingate-directory-traversal(16589) WinGate 5.2.3 build 901 and 6.0 beta 2 build 942, and other versions such as 5.0.5, allows remote attackers to read arbitrary files via leading slash (//) characters in a URL request to the wingate-internal directory.

cpe:/a:william_deich:super:3.12 cpe:/a:william_deich:super:3.16 cpe:/a:william_deich:super:3.17 cpe:/a:william_deich:super:3.18 cpe:/a:william_deich:super:3.19 cpe:/o:debian:debian_linux:3.0 cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::hppa cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::sparc

CVE-2004-0579

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:16.637-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

DEBIAN DSA-522 XF super-format-string(16458) Format string vulnerability in super before 3.23 allows local users to execute arbitrary code as root.

cpe:/h:linksys:befcmu10 cpe:/h:linksys:befn2ps4 cpe:/h:linksys:befn2ps4:1.42.7 cpe:/h:linksys:befsr11:1.40.2 cpe:/h:linksys:befsr11:1.41 cpe:/h:linksys:befsr11:1.42.3 cpe:/h:linksys:befsr11:1.42.7 cpe:/h:linksys:befsr11:1.43 cpe:/h:linksys:befsr11:1.43.3 cpe:/h:linksys:befsr11:1.44 cpe:/h:linksys:befsr41:1.35 cpe:/h:linksys:befsr41:1.36 cpe:/h:linksys:befsr41:1.37 cpe:/h:linksys:befsr41:1.38.5 cpe:/h:linksys:befsr41:1.39 cpe:/h:linksys:befsr41:1.40.2 cpe:/h:linksys:befsr41:1.41 cpe:/h:linksys:befsr41:1.42.3 cpe:/h:linksys:befsr41:1.42.7 cpe:/h:linksys:befsr41:1.43 cpe:/h:linksys:befsr41:1.43.3 cpe:/h:linksys:befsr41:1.44 cpe:/h:linksys:befsr41:1.45.7 cpe:/h:linksys:befsr41w cpe:/h:linksys:befsr81 cpe:/h:linksys:befsr81:2.42.7.1 cpe:/h:linksys:befsr81:2.44 cpe:/h:linksys:befsru31:1.40.2 cpe:/h:linksys:befsru31:1.41 cpe:/h:linksys:befsru31:1.42.3 cpe:/h:linksys:befsru31:1.42.7 cpe:/h:linksys:befsru31:1.43 cpe:/h:linksys:befsru31:1.43.3 cpe:/h:linksys:befsru31:1.44 cpe:/h:linksys:befsx41:1.42.7 cpe:/h:linksys:befsx41:1.43 cpe:/h:linksys:befsx41:1.43.3 cpe:/h:linksys:befsx41:1.43.4 cpe:/h:linksys:befsx41:1.44 cpe:/h:linksys:befsx41:1.44.3 cpe:/h:linksys:befsx41:1.45.3 cpe:/h:linksys:befvp41 cpe:/h:linksys:befvp41:1.39.64 cpe:/h:linksys:befvp41:1.40.3f cpe:/h:linksys:befvp41:1.40.4 cpe:/h:linksys:befvp41:1.42.7 cpe:/h:linksys:rv082 cpe:/h:linksys:wap55ag:1.0.7 cpe:/h:linksys:wrt54g:1.42.3 cpe:/h:linksys:wrt54g:2.00.8

CVE-2004-0580

2004-08-06T00:00:00.000-04:00

2018-08-13T17:47:19.947-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040607 Linksys BEFSR41 DHCP vulnerability server leaks network data SECTRACK 1010288 BID 10329 XF linksys-etherfast-bootp-dos(16142) DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information.

cpe:/a:gnu:ksymoops:2.4.5 cpe:/a:gnu:ksymoops:2.4.8 cpe:/a:gnu:ksymoops:2.4.9 cpe:/o:mandrakesoft:mandrake_linux:9.1 cpe:/o:mandrakesoft:mandrake_linux:9.1::ppc cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:9.2::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1::x86_64

CVE-2004-0581

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:16.747-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MANDRAKE MDKSA-2004:060 BID 10516 XF ksymoops-symlink(16392) ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and Corporate Server 2.1, allows local users to delete arbitrary files via a symlink attack on files in /tmp.

cpe:/a:webmin:webmin:1.1.40

CVE-2004-0582

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:16.793-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONECTIVA CLA-2004:848 BUGTRAQ 20040611 [SNS Advisory No.74] Webmin Access Control Rule Bypass Vulnerability DEBIAN DSA-526 GENTOO GLSA-200406-12 MISC http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/74_e.html MANDRAKE MDKSA-2004:074 BID 10474 BID 10522 CONFIRM http://www.webmin.com/changes-1.150.html XF webmin-bypass-security(16333) Unknown vulnerability in Webmin 1.140 allows remote attackers to bypass access control rules and gain read access to configuration information for a module.

cpe:/a:usermin:usermin:1.070 cpe:/a:webmin:webmin:1.1.40 cpe:/o:debian:debian_linux:3.0 cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::hppa cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::sparc

CVE-2004-0583

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:16.853-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040611 [SNS Advisory No.75] Webmin/Usermin Account Lockout Bypass Vulnerability DEBIAN DSA-526 GENTOO GLSA-200406-12 GENTOO GLSA-200406-15 MISC http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/75_e.html MANDRAKE MDKSA-2004:074 BID 10474 BID 10523 CONFIRM http://www.webmin.com/changes-1.150.html XF webmin-username-password-dos(16334) The account lockout functionality in (1) Webmin 1.140 and (2) Usermin 1.070 does not parse certain character strings, which allows remote attackers to conduct a brute force attack to guess user IDs and passwords.

cpe:/a:horde:imp:2.0 cpe:/a:horde:imp:2.2 cpe:/a:horde:imp:2.2.1 cpe:/a:horde:imp:2.2.2 cpe:/a:horde:imp:2.2.3 cpe:/a:horde:imp:2.2.4 cpe:/a:horde:imp:2.2.5 cpe:/a:horde:imp:2.2.6 cpe:/a:horde:imp:2.2.7 cpe:/a:horde:imp:2.2.8 cpe:/a:horde:imp:2.3 cpe:/a:horde:imp:3.0 cpe:/a:horde:imp:3.1 cpe:/a:horde:imp:3.1.2 cpe:/a:horde:imp:3.2 cpe:/a:horde:imp:3.2.1 cpe:/a:horde:imp:3.2.2 cpe:/a:horde:imp:3.2.3

CVE-2004-0584

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:16.947-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

GENTOO GLSA-200406-11 MISC http://www.horde.org/imp/3.2/ BID 10501 XF imp-content-type-xss(16357) Unknown vulnerability in Horde IMP 3.2.3 and earlier, before a "security fix," does not properly validate input, which allows remote attackers to execute arbitrary script as other users via script or HTML in an e-mail message, possibly triggering a cross-site scripting (XSS) vulnerability.

CVE-2004-0585

2004-08-06T00:00:00.000-04:00

2008-09-10T15:26:53.587-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-0589. Reason: This candidate is a duplicate of CVE-2004-0589. Notes: All CVE users should reference CVE-2004-0589 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/a:ibm:acprunner:1.2.5.0

CVE-2004-0586

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:17.043-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040616 IBM acpRunner Activex Dangerous Methods Vulnerability CONFIRM http://www-306.ibm.com/pc/support/site.wss/document.do?lndocid=MIGR-54588 XF ibm-acprunner-execute-code(16429) acpRunner ActiveX 1.2.5.0 allows remote attackers to execute arbitrary code via the (1) DownLoadURL, (2) SaveFilePath, and (3) Download ActiveX methods.

cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:9.2::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1::x86_64 cpe:/o:redhat:fedora_core:core_1.0 cpe:/o:suse:suse_linux:8::enterprise_server cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:9.0

CVE-2004-0587

2004-08-06T00:00:00.000-04:00

2017-10-10T21:29:29.387-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov SGI 20040804-01-U FEDORA FEDORA-2004-186 SECTRACK 1010057 MANDRAKE MDKSA-2004:066 SUSE SuSE-SA:2004:010 REDHAT RHSA-2004:413 REDHAT RHSA-2004:418 BID 10279 XF suse-hbaapinode-dos(16062) Insecure permissions for the /proc/scsi/qla2300/HbaApiNode file in Linux allows local users to cause a denial of service.

cpe:/a:usermin:usermin:1.070

CVE-2004-0588

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:17.150-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040611 [SNS Advisory No.73] Usermin Cross-site Scripting Vulnerability GENTOO GLSA-200406-15 MISC http://www.lac.co.jp/security/csl/intelligence/SNSadvisory_e/73_e.html BID 10521 XF usermin-email-xss(16494) Cross-site scripting (XSS) vulnerability in the web mail module for Usermin 1.070 allows remote attackers to insert arbitrary HTML and script via e-mail messages.

cpe:/o:cisco:ios

CVE-2004-0589

2004-08-06T00:00:00.000-04:00

2017-10-10T21:29:29.450-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CISCO 20040616 Cisco IOS Malformed BGP Packet Causes Reload CERT-VN VU#784540 XF cisco-ios-bgp-packet-dos(16427) Cisco IOS 11.1(x) through 11.3(x) and 12.0(x) through 12.2(x), when configured for BGP routing, allows remote attackers to cause a denial of service (device reload) via malformed BGP (1) OPEN or (2) UPDATE messages.

cpe:/a:frees_wan:frees_wan:1 cpe:/a:frees_wan:frees_wan:2 cpe:/a:frees_wan:super_frees_wan:1 cpe:/a:openswan:openswan:1 cpe:/a:openswan:openswan:2 cpe:/a:strongswan:strongswan:2.1.2

CVE-2004-0590

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:17.277-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

GENTOO GLSA-200406-20 MANDRAKE MDKSA-2004:070 CONFIRM http://www.openswan.org/support/vuln/can-2004-0590/ XF ipsec-verifyx509cert-auth-bypass(16515) FreeS/WAN 1.x and 2.x, and other related products including superfreeswan 1.x, openswan 1.x before 1.0.6, openswan 2.x before 2.1.4, and strongSwan before 2.1.3, allows remote attackers to authenticate using spoofed PKCS#7 certificates in which a self-signed certificate identifies an alternate Certificate Authority (CA) and spoofed issuer and subject.

cpe:/a:inter7:sqwebmail:4.0.4

CVE-2004-0591

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:17.323-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040621 XSS vulnerability in Sqwebmail 4.0.4 DEBIAN DSA-533 GENTOO GLSA-200408-02 BID 10588 XF sqwebmail-print-header-xss(16467) Cross-site scripting (XSS) vulnerability in the print_header_uc function for SqWebMail 4.0.4 and earlier, and possibly 3.x, allows remote attackers to inject arbitrary web script or HRML via (1) e-mail headers or (2) a message with a "message/delivery-status" MIME Content-Type.

cpe:/o:suse:suse_linux:2.6.5

CVE-2004-0592

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:17.387-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FULLDISC 20040703 Re: SUSE Security Announcement: kernel (SUSE-SA:2004:020) SUSE SUSE-SA:2004:020 XF linux-kernel-tcpfindoption-dos(43137) The tcp_find_option function of the netfilter subsystem for IPv6 in the SUSE Linux 2.6.5 kernel with USAGI patches, when using iptables and TCP options rules, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a large option length that produces a negative integer after a casting operation to the char type, a similar flaw to CVE-2004-0626.

cpe:/a:sygate_technologies:enforcer:3.5mr1 cpe:/a:sygate_technologies:secure_enterprise:3.0 cpe:/a:sygate_technologies:secure_enterprise:3.5

CVE-2004-0593

2004-09-28T00:00:00.000-04:00

2017-07-10T21:30:17.447-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040810 Corsaire Security Advisory - Sygate Enforcer unauthenticated broadcast issue MISC http://www.corsaire.com/advisories/c031120-003.txt BID 10908 XF sygate-enforcer-filter-bypass(16948) Sygate Enforcer 3.5MR1 and earlier passes broadcast traffic before authentication, which could allow remote attackers to bypass filtering rules.

cpe:/a:avaya:integrated_management cpe:/a:php:php:3.0 cpe:/a:php:php:3.0.1 cpe:/a:php:php:3.0.2 cpe:/a:php:php:3.0.3 cpe:/a:php:php:3.0.4 cpe:/a:php:php:3.0.5 cpe:/a:php:php:3.0.6 cpe:/a:php:php:3.0.7 cpe:/a:php:php:3.0.8 cpe:/a:php:php:3.0.9 cpe:/a:php:php:3.0.10 cpe:/a:php:php:3.0.11 cpe:/a:php:php:3.0.12 cpe:/a:php:php:3.0.13 cpe:/a:php:php:3.0.14 cpe:/a:php:php:3.0.15 cpe:/a:php:php:3.0.16 cpe:/a:php:php:3.0.17 cpe:/a:php:php:3.0.18 cpe:/a:php:php:4.0 cpe:/a:php:php:4.0.1 cpe:/a:php:php:4.0.1:patch1 cpe:/a:php:php:4.0.1:patch2 cpe:/a:php:php:4.0.2 cpe:/a:php:php:4.0.3 cpe:/a:php:php:4.0.3:patch1 cpe:/a:php:php:4.0.4 cpe:/a:php:php:4.0.5 cpe:/a:php:php:4.0.6 cpe:/a:php:php:4.0.7 cpe:/a:php:php:4.0.7:rc1 cpe:/a:php:php:4.0.7:rc2 cpe:/a:php:php:4.0.7:rc3 cpe:/a:php:php:4.1.0 cpe:/a:php:php:4.1.1 cpe:/a:php:php:4.1.2 cpe:/a:php:php:4.2::dev cpe:/a:php:php:4.2.0 cpe:/a:php:php:4.2.1 cpe:/a:php:php:4.2.2 cpe:/a:php:php:4.2.3 cpe:/a:php:php:4.3.0 cpe:/a:php:php:4.3.1 cpe:/a:php:php:4.3.2 cpe:/a:php:php:4.3.3 cpe:/a:php:php:4.3.5 cpe:/a:php:php:4.3.6 cpe:/a:php:php:4.3.7 cpe:/a:php:php:5.0:rc1 cpe:/a:php:php:5.0:rc2 cpe:/a:php:php:5.0:rc3 cpe:/h:avaya:converged_communications_server:2.0 cpe:/h:avaya:s8300:r2.0.0 cpe:/h:avaya:s8300:r2.0.1 cpe:/h:avaya:s8500:r2.0.0 cpe:/h:avaya:s8500:r2.0.1 cpe:/h:avaya:s8700:r2.0.0 cpe:/h:avaya:s8700:r2.0.1 cpe:/o:redhat:fedora_core:core_1.0 cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:trustix:secure_linux:1.5 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1

CVE-2004-0594

2004-07-27T00:00:00.000-04:00

2018-10-30T12:25:35.387-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONECTIVA CLA-2004:847 FULLDISC 20040714 Advisory 11/2004: PHP memory_limit remote vulnerability BUGTRAQ 20040713 Advisory 11/2004: PHP memory_limit remote vulnerability BUGTRAQ 20040714 TSSA-2004-013 - php BUGTRAQ 20040722 [OpenPKG-SA-2004.034] OpenPKG Security Advisory (php) HP SSRT4777 DEBIAN DSA-531 DEBIAN DSA-669 GENTOO GLSA-200407-13 MANDRAKE MDKSA-2004:068 SUSE SUSE-SA:2004:021 REDHAT RHSA-2004:392 REDHAT RHSA-2004:395 REDHAT RHSA-2004:405 REDHAT RHSA-2005:816 BID 10725 TRUSTIX 2004-0039 XF php-memorylimit-code-execution(16693) The memory_limit functionality in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, under certain conditions such as when register_globals is enabled, allows remote attackers to execute arbitrary code by triggering a memory_limit abort during execution of the zend_hash_init function and overwriting a HashTable destructor pointer before the initialization of key data structures is complete.

cpe:/a:avaya:integrated_management cpe:/a:php:php:4.0 cpe:/a:php:php:4.0.1 cpe:/a:php:php:4.0.2 cpe:/a:php:php:4.0.3 cpe:/a:php:php:4.0.4 cpe:/a:php:php:4.0.5 cpe:/a:php:php:4.0.6 cpe:/a:php:php:4.0.7 cpe:/a:php:php:4.1.0 cpe:/a:php:php:4.1.1 cpe:/a:php:php:4.1.2 cpe:/a:php:php:4.2.0 cpe:/a:php:php:4.2.1 cpe:/a:php:php:4.2.2 cpe:/a:php:php:4.2.3 cpe:/a:php:php:4.3.0 cpe:/a:php:php:4.3.1 cpe:/a:php:php:4.3.2 cpe:/a:php:php:4.3.3 cpe:/a:php:php:4.3.5 cpe:/a:php:php:4.3.6 cpe:/a:php:php:4.3.7 cpe:/a:php:php:5.0:rc1 cpe:/a:php:php:5.0:rc2 cpe:/a:php:php:5.0:rc3 cpe:/h:avaya:converged_communications_server:2.0 cpe:/h:avaya:s8300:r2.0.0 cpe:/h:avaya:s8300:r2.0.1 cpe:/h:avaya:s8500:r2.0.0 cpe:/h:avaya:s8500:r2.0.1 cpe:/h:avaya:s8700:r2.0.0 cpe:/h:avaya:s8700:r2.0.1 cpe:/o:redhat:fedora_core:core_1.0 cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:trustix:secure_linux:1.5 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1

CVE-2004-0595

2004-07-27T00:00:00.000-04:00

2018-10-30T12:25:35.387-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONECTIVA CLA-2004:847 FULLDISC 20040714 Advisory 12/2004: PHP strip_tags() bypass vulnerability BUGTRAQ 20040713 Advisory 11/2004: PHP memory_limit remote vulnerability BUGTRAQ 20040714 TSSA-2004-013 - php BUGTRAQ 20040722 [OpenPKG-SA-2004.034] OpenPKG Security Advisory (php) HP SSRT4777 DEBIAN DSA-531 DEBIAN DSA-669 GENTOO GLSA-200407-13 MANDRAKE MDKSA-2004:068 SUSE SUSE-SA:2004:021 REDHAT RHSA-2004:392 REDHAT RHSA-2004:395 REDHAT RHSA-2004:405 REDHAT RHSA-2005:816 BID 10724 XF php-strip-tag-bypass(16692) The strip_tags function in PHP 4.x up to 4.3.7, and 5.x up to 5.0.0RC3, does not filter null (\0) characters within tag names when restricting input to allowed tags, which allows dangerous tags to be processed by web browsers such as Internet Explorer and Safari, which ignore null characters and facilitate the exploitation of cross-site scripting (XSS) vulnerabilities.

cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.0:test1 cpe:/o:linux:linux_kernel:2.6.0:test10 cpe:/o:linux:linux_kernel:2.6.0:test11 cpe:/o:linux:linux_kernel:2.6.0:test2 cpe:/o:linux:linux_kernel:2.6.0:test3 cpe:/o:linux:linux_kernel:2.6.0:test4 cpe:/o:linux:linux_kernel:2.6.0:test5 cpe:/o:linux:linux_kernel:2.6.0:test6 cpe:/o:linux:linux_kernel:2.6.0:test7 cpe:/o:linux:linux_kernel:2.6.0:test8 cpe:/o:linux:linux_kernel:2.6.0:test9 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.6:rc1 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6_test9_cvs

CVE-2004-0596

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:17.683-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://linux.bkbits.net:8080/linux-2.6/cset@40d4aa72hPLWy-jMLr0eJAXMxHcNZg BID 10730 XF linux-eql-dos(16694) The Equalizer Load-balancer for serial network interfaces (eql.c) in Linux kernel 2.6.x up to 2.6.7 allows local users to cause a denial of service via a non-existent device name that triggers a null dereference.

cpe:/a:greg_roelofs:libpng:1.2.5 cpe:/a:microsoft:msn_messenger:6.1 cpe:/a:microsoft:msn_messenger:6.2 cpe:/a:microsoft:windows_media_player:9 cpe:/a:microsoft:windows_messenger:5.0 cpe:/o:microsoft:windows_98se cpe:/o:microsoft:windows_me:::second_edition

CVE-2004-0597

2004-11-23T00:00:00.000-05:00

2018-10-12T17:34:52.310-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SCO SCOSA-2005.49 CONECTIVA CLA-2004:856 BUGTRAQ 20040804 [OpenPKG-SA-2004.035] OpenPKG Security Advisory (png) HP SSRT4778 SCO SCOSA-2004.16 FEDORA FLSA:2089 BUGTRAQ 20050209 MSN Messenger PNG Image Buffer Overflow Download Shellcoded Exploit MISC http://scary.beasts.org/security/CESA-2004-001.txt SUNALERT 200663 CONFIRM http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21-114816-02-1 CONFIRM http://www.adobe.com/support/downloads/detail.jsp?ftpID=2679 MISC http://www.coresecurity.com/common/showdoc.php?idx=421&idxseccion=10 DEBIAN DSA-536 GENTOO GLSA-200408-03 GENTOO GLSA-200408-22 CERT-VN VU#388984 CERT-VN VU#817368 MANDRAKE MDKSA-2004:079 MANDRIVA MDKSA-2006:212 MANDRIVA MDKSA-2006:213 CONFIRM http://www.mozilla.org/projects/security/known-vulnerabilities.html SUSE SUSE-SA:2004:023 REDHAT RHSA-2004:402 REDHAT RHSA-2004:421 REDHAT RHSA-2004:429 BID 10857 BID 15495 TRUSTIX 2004-0040 CERT TA04-217A CERT TA05-039A FEDORA FLSA:1943 MS MS05-009 XF libpng-pnghandle-bo(16894) Multiple buffer overflows in libpng 1.2.5 and earlier, as used in multiple products, allow remote attackers to execute arbitrary code via malformed PNG images in which (1) the png_handle_tRNS function does not properly validate the length of transparency chunk (tRNS) data, or the (2) png_handle_sBIT or (3) png_handle_hIST functions do not perform sufficient bounds checking.

cpe:/a:greg_roelofs:libpng:1.2.5

CVE-2004-0598

2004-11-23T00:00:00.000-05:00

2017-10-10T21:29:29.730-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2004:856 BUGTRAQ 20040804 [OpenPKG-SA-2004.035] OpenPKG Security Advisory (png) HP SSRT4778 SCO SCOSA-2004.16 MISC http://scary.beasts.org/security/CESA-2004-001.txt SUNALERT 200663 DEBIAN DSA-536 GENTOO GLSA-200408-03 GENTOO GLSA-200408-22 CERT-VN VU#236656 MANDRAKE MDKSA-2004:079 MANDRIVA MDKSA-2006:212 MANDRIVA MDKSA-2006:213 CONFIRM http://www.mozilla.org/projects/security/known-vulnerabilities.html SUSE SUSE-SA:2004:023 REDHAT RHSA-2004:402 REDHAT RHSA-2004:429 BID 10857 TRUSTIX 2004-0040 CERT TA04-217A FEDORA FLSA:1943 XF libpng-pnghandleiccp-dos(16895) The png_handle_iCCP function in libpng 1.2.5 and earlier allows remote attackers to cause a denial of service (application crash) via a certain PNG image that triggers a null dereference.

cpe:/a:greg_roelofs:libpng:1.2.5

CVE-2004-0599

2004-11-23T00:00:00.000-05:00

2017-10-10T21:29:29.827-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SCO SCOSA-2005.49 CONECTIVA CLA-2004:856 APPLE APPLE-SA-2004-09-09 BUGTRAQ 20040804 [OpenPKG-SA-2004.035] OpenPKG Security Advisory (png) HP SSRT4778 SCO SCOSA-2004.16 FEDORA FLSA:2089 MISC http://scary.beasts.org/security/CESA-2004-001.txt SUNALERT 200663 DEBIAN DSA-536 DEBIAN DSA-570 DEBIAN DSA-571 GENTOO GLSA-200408-03 GENTOO GLSA-200408-22 CERT-VN VU#160448 CERT-VN VU#286464 CERT-VN VU#477512 MANDRAKE MDKSA-2004:079 MANDRIVA MDKSA-2006:212 MANDRIVA MDKSA-2006:213 CONFIRM http://www.mozilla.org/projects/security/known-vulnerabilities.html SUSE SUSE-SA:2004:023 REDHAT RHSA-2004:402 REDHAT RHSA-2004:421 REDHAT RHSA-2004:429 BID 10857 BID 15495 TRUSTIX 2004-0040 CERT TA04-217A FEDORA FLSA:1943 XF lilbpng-integer-bo(16896) Multiple integer overflows in the (1) png_read_png in pngread.c or (2) png_handle_sPLT functions in pngrutil.c or (3) progressive display image reading capability in libpng 1.2.5 and earlier allow remote attackers to cause a denial of service (application crash) via a malformed PNG image.

cpe:/a:samba:samba:3.0.2 cpe:/a:samba:samba:3.0.2a cpe:/a:samba:samba:3.0.3 cpe:/a:samba:samba:3.0.4 cpe:/o:trustix:secure_linux:1.5 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1

CVE-2004-0600

2004-07-27T00:00:00.000-04:00

2017-10-10T21:29:29.887-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONECTIVA CLA-2004:851 CONECTIVA CLA-2004:854 BUGTRAQ 20040722 Security Release - Samba 3.0.5 and 2.2.10 BUGTRAQ 20040722 [OpenPKG-SA-2004.033] OpenPKG Security Advisory (samba) BUGTRAQ 20040722 Samba 3.x swat preauthentication buffer overflow BUGTRAQ 20040722 TSSA-2004-014 - samba BUGTRAQ 20040722 SWAT PreAuthorization PoC GENTOO GLSA-200407-21 MANDRAKE MDKSA-2004:071 SUSE SUSE-SA:2004:022 REDHAT RHSA-2004:259 TRUSTIX 2004-0039 XF samba-swat-base64-bo(16785) Buffer overflow in the Samba Web Administration Tool (SWAT) in Samba 3.0.2 to 3.0.4 allows remote attackers to execute arbitrary code via an invalid base-64 character during HTTP basic authentication.

cpe:/a:distcc:distcc:2.7 cpe:/a:distcc:distcc:2.9 cpe:/a:distcc:distcc:2.10 cpe:/a:distcc:distcc:2.11 cpe:/a:distcc:distcc:2.12 cpe:/a:distcc:distcc:2.13 cpe:/a:distcc:distcc:2.14 cpe:/a:distcc:distcc:2.15

CVE-2004-0601

2004-12-23T00:00:00.000-05:00

2017-07-10T21:30:18.057-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://distcc.samba.org/ftp/distcc/distcc-2.17.NEWS BID 11319 XF distcc-ip-gain-privileges(17581) distcc before 2.16, when running on 64-bit platforms, does not interpret IP-based access control rules correctly, which could allow remote attackers to bypass intended restrictions.

cpe:/o:freebsd:freebsd:4.0 cpe:/o:freebsd:freebsd:5.0

CVE-2004-0602

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:18.107-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FREEBSD FreeBSD-SA-04:13 BID 10643 XF freebsd-binary-information-disclosure(16558) The binary compatibility mode for FreeBSD 4.x and 5.x does not properly handle certain Linux system calls, which could allow local users to access kernel memory to gain privileges or cause a system panic.

cpe:/a:gnu:gzip:1.3.3

CVE-2004-0603

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:18.150-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=54890 GENTOO GLSA-200406-18 BID 10603 XF gzip-gzexe-tmpfile(16506) gzexe in gzip 1.3.3 and earlier will execute an argument when the creation of a temp file fails instead of exiting the program, which could allow remote attackers or local users to execute arbitrary commands, a different vulnerability than CVE-1999-1332.

cpe:/a:gift-fasttrack:gift-fasttrack:0.8.0 cpe:/a:gift-fasttrack:gift-fasttrack:0.8.1 cpe:/a:gift-fasttrack:gift-fasttrack:0.8.2 cpe:/a:gift-fasttrack:gift-fasttrack:0.8.3 cpe:/a:gift-fasttrack:gift-fasttrack:0.8.4 cpe:/a:gift-fasttrack:gift-fasttrack:0.8.5 cpe:/a:gift-fasttrack:gift-fasttrack:0.8.6 cpe:/o:gentoo:linux:1.4

CVE-2004-0604

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:18.213-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://developer.berlios.de/bugs/?func=detailbug&bug_id=1573&group_id=809 CONFIRM http://gift-fasttrack.berlios.de/ GENTOO GLSA-200406-19 BID 10604 XF gift-fasttrack-daemon-dos(16508) The HTTP client and server in giFT-FastTrack 0.8.6 and earlier allows remote attackers to cause a denial of service (crash), possibly via an empty search query, which triggers a NULL dereference.

cpe:/a:ircd-hybrid:ircd-hybrid:7.0.1 cpe:/a:ircd-ratbox:ircd-ratbox:1.5.1 cpe:/a:ircd-ratbox:ircd-ratbox:2.0_rc6

CVE-2004-0605

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:18.260-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040618 ircd-hybrid-7 / ircd-ratbox low-bandwidth DoS BID 10572 XF ircd-parseclientqueued-dos(16457) Non-registered IRC users using (1) ircd-hybrid 7.0.1 and earlier, (2) ircd-ratbox 1.5.1 and earlier, or (3) ircd-ratbox 2.0rc6 and earlier do not have a rate-limit imposed, which could allow remote attackers to cause a denial of service by repeatedly making requests, which are slowly dequeued.

cpe:/h:infoblox:dns_one_appliance:2.4.0.8 cpe:/h:infoblox:dns_one_appliance:2.4.0.8a

CVE-2004-0606

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:18.307-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20040619 Script injection in DNSONE appliance BID 10573 XF dnsone-dhcp-report-xss(16456) Cross-site scripting (XSS) vulnerability in Infoblox DNS One running firmware 2.4.0-8 and earlier allows remote attackers to execute arbitrary scripts as other users via the (1) CLIENTID or (2) HOSTNAME option of a DHCP request.

cpe:/a:ipsec-tools:ipsec-tools:0.3 cpe:/a:ipsec-tools:ipsec-tools:0.3.1 cpe:/a:ipsec-tools:ipsec-tools:0.3.2 cpe:/a:ipsec-tools:ipsec-tools:0.3_rc1 cpe:/a:ipsec-tools:ipsec-tools:0.3_rc2 cpe:/a:ipsec-tools:ipsec-tools:0.3_rc3 cpe:/a:ipsec-tools:ipsec-tools:0.3_rc4 cpe:/a:ipsec-tools:ipsec-tools:0.3_rc5 cpe:/a:kame:racoon cpe:/a:kame:racoon:2003-07-11 cpe:/a:kame:racoon:2004-04-05 cpe:/a:kame:racoon:2004-04-07b cpe:/a:kame:racoon:2004-05-03 cpe:/o:redhat:enterprise_linux:3.0::advanced_servers cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation cpe:/o:redhat:enterprise_linux_desktop:3.0

CVE-2004-0607

2004-12-06T00:00:00.000-05:00

2017-10-10T21:29:29.950-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SCO SCOSA-2005.10 BUGTRAQ 20040614 authentication bug in KAME's racoon BUGTRAQ 20040615 Re: authentication bug in KAME's racoon GENTOO GLSA-200406-17 SECTRACK 1010495 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=245982 REDHAT RHSA-2004:308 BID 10546 XF racoon-eaycheckx509cert-auth-bypass(16414) The eay_check_x509cert function in KAME Racoon successfully verifies certificates even when OpenSSL validation fails, which could allow remote attackers to bypass authentication.

cpe:/a:arush:devastation:390.0 cpe:/a:dreamforge:tnn_outdoors_pro_hunter cpe:/a:epic_games:unreal_engine:226f cpe:/a:epic_games:unreal_engine:433 cpe:/a:epic_games:unreal_engine:436 cpe:/a:epic_games:unreal_tournament:451b cpe:/a:epic_games:unreal_tournament_2003:2199_linux cpe:/a:epic_games:unreal_tournament_2003:2199_macos cpe:/a:epic_games:unreal_tournament_2003:2199_win32 cpe:/a:epic_games:unreal_tournament_2003:2225_macos cpe:/a:epic_games:unreal_tournament_2003:2225_win32 cpe:/a:epic_games:unreal_tournament_2004:macos cpe:/a:epic_games:unreal_tournament_2004:win32 cpe:/a:infogrames:tacticalops:3.4 cpe:/a:infogrames:x-com_enforcer cpe:/a:ion_storm:deusex:1.112_fm cpe:/a:nerf_arena_blast:nerf_arena_blast:1.2 cpe:/a:rage_software:mobile_forces:20000.0 cpe:/a:robert_jordan:wheel_of_time:333.0b cpe:/a:running_with_scissors:postal_2:1337 cpe:/o:gentoo:linux:1.4

CVE-2004-0608

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:18.447-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://aluigi.altervista.org/adv/unsecure-adv.txt BUGTRAQ 20040618 Code execution in the Unreal Engine through \secure\ packet GENTOO GLSA-200407-14 BID 10570 XF unreal-secure-query-command-execute(16451) The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and earlier, Rune 107 and earlier, Tactical Ops 3.4.0 and earlier, Unreal 1 226f and earlier, Unreal II XMP 7710 and earlier, Unreal Tournament 451b and earlier, Unreal Tournament 2003 2225 and earlier, Unreal Tournament 2004 before 3236, Wheel of Time 333b and earlier, and X-com Enforcer, allows remote attackers to execute arbitrary code via a UDP packet containing a secure query with a long value, which overwrites memory.

cpe:/a:rssh:rssh:2.0 cpe:/a:rssh:rssh:2.1

CVE-2004-0609

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:18.497-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040619 Security flaw in rssh BID 10574 XF rssh-jail-obtain-info(16470) rssh 2.0 through 2.1.x expands command line arguments before entering a chroot jail, which allows remote authenticated users to determine the existence of files in a directory outside the jail.

cpe:/h:microsoft:mn-500_wireless_base_station

CVE-2004-0610

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:18.543-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040621 Microsoft MN-500 Wireless Router Web-Based Administration DoS MISC http://www.kurczaba.com/securityadvisories/0406213.htm BID 10585 XF mn500-web-admin-dos(16448) The Web administration interface in Microsoft MN-500 Wireless Router allows remote attackers to cause a denial of service (connection refusal) via a large number of open HTTP connections.

cpe:/h:netgear:fvs318:1.0 cpe:/h:netgear:fvs318:1.1 cpe:/h:netgear:fvs318:1.2 cpe:/h:netgear:fvs318:1.3

CVE-2004-0611

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:18.590-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040621 NETGEAR FVS318 Web-Based Administration DoS BID 10585 XF netgear-fvs318-dos(16462) Web-Based Administration in Netgear FVS318 VPN Router allows remote attackers to cause a denial of service (no new connections) via a large number of open HTTP connections.

cpe:/a:zonelabs:zonealarm:5.0.590.015::pro

CVE-2004-0612

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:18.650-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040625 Zone Labs response to "ZoneAlarm Pro 'Mobile Code' Bypass Vulnerability" BUGTRAQ 20040621 ZoneAlarm Pro 'Mobile Code' Bypass Vulnerability BID 10584 XF zonealarm-mobile-code-bypass(16471) The Mobile Code filter in ZoneAlarm Pro 5.0.590.015 does not filter mobile code within an SSL encrypted session, which could allow remote attackers to bypass the mobile code filtering. NOTE: it has been disputed by the vendor that this behavior is required by the SSL specification.

cpe:/a:osticket:osticket_sts:1.2

CVE-2004-0613

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:18.713-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040621 Multiple osTicket exploits! BID 10586 XF osticket-php-file-upload(16477) XF osticket-view-attachments(16478) osTicket allows remote attackers to view sensitive uploaded files and possibly execute arbitrary code via an HTTP request that uploads a PHP file to the ticket attachments directory.

cpe:/a:osticket:osticket_sts

CVE-2004-0614

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:18.777-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040621 Multiple osTicket exploits! XF osticket-php-file-upload(16477) osTicket trusts a hidden form field in the submit form to limit the upload size of a document, which could allow remote attackers to upload a file of any size.

cpe:/h:d-link:di-614%2b:2.30 cpe:/h:d-link:di-624:1.28 cpe:/h:d-link:di-704p:2.60b2

CVE-2004-0615

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:18.840-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040701 DLINK 624, script injection vulnerability BUGTRAQ 20040621 DLINK 614+, script injection vulnerability BUGTRAQ 20040621 DLINK 704, script injection vulnerability SECTRACK 1010562 BID 10587 XF dlink614-dhcp-xss(16468) Cross-site scripting (XSS) vulnerability in D-Link DI-614+ SOHO router running firmware 2.30, and DI-704 SOHO router running firmware 2.60B2, and DI-624, allows remote attackers to inject arbitrary script or HTML via the DHCP HOSTNAME option in a DHCP request.

cpe:/h:bt:voyager_2000_wireless_adsl_router

CVE-2004-0616

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:18.900-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20040622 Wireless Modem (BT Voyager 2000 Wireless ADSL Router cleartext password) BUGTRAQ 20040622 Wireless Modem (BT Voyager 2000 Wireless ADSL Router cleartext password) BID 10589 XF bt-voyager-password-plaintext(16472) The BT Voyager 2000 Wireless ADSL Router has a default public SNMP community name, which allows remote attackers to obtain sensitive information such as the password, which is stored in plaintext.

cpe:/a:arbitroweb:arbitroweb:0.5 cpe:/a:arbitroweb:arbitroweb:0.6

CVE-2004-0617

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:18.947-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040622 ArbitroWeb v0.6 Javascript injection vulnerability BID 10592 XF arbitroweb-rawurl-xss(16481) Cross-site scripting (XSS) vulnerability in ArbitroWeb 0.6 allows remote attackers to inject arbitrary script or HTML via the rawURL parameter.

cpe:/o:freebsd:freebsd:4.10:release cpe:/o:freebsd:freebsd:5.1 cpe:/o:freebsd:freebsd:5.1:alpha cpe:/o:freebsd:freebsd:5.1:release cpe:/o:freebsd:freebsd:5.1:release_p5 cpe:/o:freebsd:freebsd:5.1:releng cpe:/o:freebsd:freebsd:5.2.1:release

CVE-2004-0618

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:19.010-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040623 Security Advisory : FreeBSD local DoS BID 10596 XF freebsd-execve-dos(16499) FreeBSD 5.1 for the Alpha processor allows local users to cause a denial of service (crash) via an execve system call with an unaligned memory address as an argument.

cpe:/a:redhat:kernel:2.4.20-8::athlon cpe:/a:redhat:kernel:2.4.20-8::athlon_smp cpe:/a:redhat:kernel:2.4.20-8::i386 cpe:/a:redhat:kernel:2.4.20-8::i386_src cpe:/a:redhat:kernel:2.4.20-8::i586 cpe:/a:redhat:kernel:2.4.20-8::i586_smp cpe:/a:redhat:kernel:2.4.20-8::i686 cpe:/a:redhat:kernel:2.4.20-8::i686_smp cpe:/o:redhat:fedora_core:core_1.0 cpe:/o:redhat:linux:8.0 cpe:/o:redhat:linux:8.0::i386 cpe:/o:redhat:linux:8.0::i686

CVE-2004-0619

2004-12-06T00:00:00.000-05:00

2017-10-10T21:29:30.013-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040623 Linux Broadcom 5820 Cryptonet Driver Integer Overflow CIAC P-047 REDHAT RHSA-2004:549 REDHAT RHSA-2005:283 BID 10599 XF bcm5820-adddsabufbytes-integer-bo(16459) Integer overflow in the ubsec_keysetup function for Linux Broadcom 5820 cryptonet driver allows local users to cause a denial of service (crash) and possibly execute arbitrary code via a negative add_dsa_buf_bytes variable, which leads to a buffer overflow.

cpe:/a:jelsoft:vbulletin:3.0.1

CVE-2004-0620

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:19.120-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040624 vBulletin HTML Injection Vuln BID 10602 XF vbulletin-newreply-newthread-xss(16502) Cross-site scripting (XSS) vulnerability in (1) newreply.php or (2) newthread.php in vBulletin 3.0.1 allows remote attackers to inject arbitrary HTML or script as other users via the Edit-panel.

cpe:/a:zaireweb_solutions:newsletter_zws

CVE-2004-0621

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:19.167-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040624 ZWS Newsletter & Mailing List Manager BID 10605 XF zws-gain-admin-access(16507) admin.php in Newsletter ZWS allows remote attackers to gain administrative privileges via a list_user operation with the ulevel parameter set to 1 (administrator level), which lists all users and their passwords.

cpe:/o:apple:mac_os_x:10.3.4 cpe:/o:apple:mac_os_x:10.4 cpe:/o:apple:mac_os_x:10.5

CVE-2004-0622

2004-12-06T00:00:00.000-05:00

2018-10-19T11:30:08.127-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://citp.princeton.edu/pub/coldboot.pdf BUGTRAQ 20040625 Mac OS X stores login/Keychain/FileVault passwords on disk BUGTRAQ 20080228 Loginwindow.app and Mac OS X BUGTRAQ 20080229 Re: Loginwindow.app and Mac OS X XF macos-memory-view-passwords(16557) Apple Mac OS X 10.3.4, 10.4, 10.5, and possibly other versions does not properly clear memory for login (aka Loginwindow.app), Keychain, or FileVault passwords, which could allow the root user or an attacker with physical access to obtain sensitive information by reading memory.

cpe:/a:gnu:gnats:3.0_02 cpe:/a:gnu:gnats:3.2 cpe:/a:gnu:gnats:3.14b cpe:/a:gnu:gnats:3.113 cpe:/a:gnu:gnats:3.113.1 cpe:/a:gnu:gnats:3.113.1.6 cpe:/a:gnu:gnats:4.0

CVE-2004-0623

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:19.293-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040625 format string vulnerability in Gnats BID 10609 XF gnats-format-string(16517) Format string vulnerability in misc.c in GNU GNATS 4.00 may allow remote attackers to execute arbitrary code via format string specifiers in a string that gets logged by syslog.

cpe:/a:artmedic_webdesign:artmedic_links:5.0

CVE-2004-0624

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:19.340-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040625 artmedic_links5 PHP Script (include path) vuln XF artmedic-url-file-disclosure(16518) PHP remote file inclusion vulnerability in index.php for Artmedic links 5.0 (artmedic_links5) allows remote attackers to execute arbitrary PHP code by modifying the id parameter to reference a URL on a remote web server that contains the code.

cpe:/a:websoft:infinity_web:1.0

CVE-2004-0625

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:19.387-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20040627 ZH2004-14SA (security advisory):Sql Injection in Infinity WEB BUGTRAQ 20040627 ZH2004-14SA (security advisory):Sql Injection in Infinity WEB BID 10614 MISC http://www.zone-h.org/en/advisories/read/id=4892/ XF infinity-web-sql-injection(16513) SQL injection vulnerability in Infinity WEB 1.0 allows remote attackers to bypass authentication and gain privileges via the login page.

cpe:/o:conectiva:linux:10 cpe:/o:gentoo:linux cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:suse:suse_linux:8.0 cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.1

CVE-2004-0626

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:19.447-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2004:852 FEDORA FEDORA-2004-202 BUGTRAQ 20040630 Remote DoS vulnerability in Linux kernel 2.6.x GENTOO GLSA-200407-12 SUSE SUSE-SA:2004:020 XF linux-tcpfindoption-dos(16554) The tcp_find_option function of the netfilter subsystem in Linux kernel 2.6, when using iptables and TCP options rules, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a large option length that produces a negative integer after a casting operation to the char type.

cpe:/a:mysql:mysql:4.1 cpe:/a:mysql:mysql:5.0

CVE-2004-0627

2004-12-06T00:00:00.000-05:00

2016-10-17T22:47:04.777-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

VULNWATCH 20040705 MySQL Authentication Bypass BUGTRAQ 20040705 MySQL Authentication Bypass CERT-VN VU#184030 The check_scramble_323 function in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to bypass authentication via a zero-length scrambled string.

cpe:/a:mysql:mysql:4.1 cpe:/a:mysql:mysql:5.0

CVE-2004-0628

2004-12-06T00:00:00.000-05:00

2017-07-10T21:30:19.497-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

VULNWATCH 20040705 MySQL Authentication Bypass BUGTRAQ 20040705 MySQL Authentication Bypass CERT-VN VU#645326 XF mysql-myrnd-bo(16612) Stack-based buffer overflow in MySQL 4.1.x before 4.1.3, and 5.0, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long scramble string.

cpe:/a:adobe:acrobat:5.0 cpe:/a:adobe:acrobat:5.0.5 cpe:/a:adobe:acrobat:6.0 cpe:/a:adobe:acrobat:6.0.1 cpe:/a:adobe:acrobat:6.0.2 cpe:/a:adobe:acrobat_reader:5.0 cpe:/a:adobe:acrobat_reader:5.0.5 cpe:/a:adobe:acrobat_reader:5.1 cpe:/a:adobe:acrobat_reader:6.0 cpe:/a:adobe:acrobat_reader:6.0.1 cpe:/a:adobe:acrobat_reader:6.0.2

CVE-2004-0629

2004-09-28T00:00:00.000-04:00

2017-07-10T21:30:19.543-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://www.adobe.com/support/techdocs/330527.html GENTOO GLSA-200408-14 IDEFENSE 20040813 Adobe Acrobat/Acrobat Reader ActiveX Control Buffer Overflow Vulnerability BID 10947 XF acrobat-reader-activex-bo(16998) Buffer overflow in the ActiveX component (pdf.ocx) for Adobe Acrobat 5.0.5 and Acrobat Reader, and possibly other versions, allows remote attackers to execute arbitrary code via a URI for a PDF file with a null terminator (%00) followed by a long string.

cpe:/a:adobe:acrobat_reader:5.0 cpe:/a:adobe:acrobat_reader:5.0.5 cpe:/a:adobe:acrobat_reader:5.0.6

CVE-2004-0630

2004-08-18T00:00:00.000-04:00

2017-07-10T21:30:19.607-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

GENTOO GLSA-200408-14 CONFIRM http://www.adobe.com/support/techdocs/322914.html IDEFENSE 20040812 Adobe Acrobat Reader (Unix) Shell Metacharacter Code Execution Vulnerability REDHAT RHSA-2004:432 BID 10931 XF acrobat-reader-execute-code(16973) The uudecoding feature in Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via shell metacharacters ("`" or backtick) in the filename of the PDF file that is provided to the uudecode command.

cpe:/a:adobe:acrobat_reader:5.0 cpe:/a:adobe:acrobat_reader:5.0.5 cpe:/a:adobe:acrobat_reader:5.0.6

CVE-2004-0631

2004-08-18T00:00:00.000-04:00

2017-07-10T21:30:19.667-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

GENTOO GLSA-200408-14 CONFIRM http://www.adobe.com/support/techdocs/322914.html IDEFENSE 20040812 Adobe Acrobat Reader (Unix) 5.0 Uudecode Filename Buffer Overflow Vulnerability REDHAT RHSA-2004:432 BID 10932 XF adobe-acrobat-uudecode-bo(16972) Buffer overflow in the uudecoding feature for Adobe Acrobat Reader 5.0.5 and 5.0.6 for Unix and Linux, and possibly other versions including those before 5.0.9, allows remote attackers to execute arbitrary code via a long filename for the PDF file that is provided to the uudecode command.

cpe:/a:adobe:acrobat:6.0 cpe:/a:adobe:acrobat:6.0.1 cpe:/a:adobe:acrobat_reader:6.0 cpe:/a:adobe:acrobat_reader:6.0.1

CVE-2004-0632

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:19.730-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://www.adobe.com/support/techdocs/330527.html MISC http://www.adobe.com/support/techdocs/34222.htm IDEFENSE 20040712 Adobe Reader 6.0 Filename Handler Buffer Overflow Vulnerability XF adobe-acrobat-null-bo(16667) Adobe Reader 6.0 does not properly handle null characters when splitting a filename path into components, which allows remote attackers to execute arbitrary code via a file with a long extension that is not normally handled by Reader, triggering a buffer overflow.

cpe:/a:ethereal_group:ethereal:0.10.3 cpe:/a:ethereal_group:ethereal:0.10.4 cpe:/o:gentoo:linux cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:linux_advanced_workstation:2.1::as

CVE-2004-0633

2004-12-06T00:00:00.000-05:00

2017-10-10T21:29:30.090-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127381 CONECTIVA CLA-2005:916 SECTRACK 1010655 CONFIRM http://www.ethereal.com/appnotes/enpa-sa-00015.html GENTOO GLSA-200407-08 CERT-VN VU#829422 MANDRAKE MDKSA-2004:067 FEDORA FEDORA-2004-219 FEDORA FEDORA-2004-220 REDHAT RHSA-2004:378 XF ethereal-isns-dos(16630) The iSNS dissector for Ethereal 0.10.3 through 0.10.4 allows remote attackers to cause a denial of service (process abort) via an integer overflow.

cpe:/a:ethereal_group:ethereal:0.9.15 cpe:/a:ethereal_group:ethereal:0.10.4 cpe:/o:gentoo:linux cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:linux_advanced_workstation:2.1::as

CVE-2004-0634

2004-12-06T00:00:00.000-05:00

2017-10-10T21:29:30.153-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127381 CONECTIVA CLA-2005:916 SECTRACK 1010655 CONFIRM http://www.ethereal.com/appnotes/enpa-sa-00015.html GENTOO GLSA-200407-08 CERT-VN VU#518782 MANDRAKE MDKSA-2004:067 FEDORA FEDORA-2004-219 FEDORA FEDORA-2004-220 REDHAT RHSA-2004:378 XF ethereal-smb-sid-dos(16631) The SMB SID snooping capability in Ethereal 0.9.15 to 0.10.4 allows remote attackers to cause a denial of service (process crash) via a handle without a policy name, which causes a null dereference.

cpe:/a:ethereal_group:ethereal:0.8.15 cpe:/a:ethereal_group:ethereal:0.8.16 cpe:/a:ethereal_group:ethereal:0.8.17 cpe:/a:ethereal_group:ethereal:0.8.18 cpe:/a:ethereal_group:ethereal:0.8.19 cpe:/a:ethereal_group:ethereal:0.9 cpe:/a:ethereal_group:ethereal:0.9.1 cpe:/a:ethereal_group:ethereal:0.9.2 cpe:/a:ethereal_group:ethereal:0.9.3 cpe:/a:ethereal_group:ethereal:0.9.4 cpe:/a:ethereal_group:ethereal:0.9.5 cpe:/a:ethereal_group:ethereal:0.9.6 cpe:/a:ethereal_group:ethereal:0.9.7 cpe:/a:ethereal_group:ethereal:0.9.8 cpe:/a:ethereal_group:ethereal:0.9.9 cpe:/a:ethereal_group:ethereal:0.9.10 cpe:/a:ethereal_group:ethereal:0.9.11 cpe:/a:ethereal_group:ethereal:0.9.12 cpe:/a:ethereal_group:ethereal:0.9.13 cpe:/a:ethereal_group:ethereal:0.9.14 cpe:/a:ethereal_group:ethereal:0.9.15 cpe:/a:ethereal_group:ethereal:0.9.16 cpe:/a:ethereal_group:ethereal:0.10 cpe:/a:ethereal_group:ethereal:0.10.1 cpe:/a:ethereal_group:ethereal:0.10.2 cpe:/a:ethereal_group:ethereal:0.10.3 cpe:/a:ethereal_group:ethereal:0.10.4 cpe:/o:gentoo:linux cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:linux_advanced_workstation:2.1::as

CVE-2004-0635

2004-12-06T00:00:00.000-05:00

2017-10-10T21:29:30.230-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127381 CONECTIVA CLA-2005:916 SECTRACK 1010655 DEBIAN DSA-528 CONFIRM http://www.ethereal.com/appnotes/enpa-sa-00015.html GENTOO GLSA-200407-08 CERT-VN VU#835846 MANDRAKE MDKSA-2004:067 FEDORA FEDORA-2004-219 FEDORA FEDORA-2004-220 REDHAT RHSA-2004:378 XF ethereal-snmp-community-dos(16632) The SNMP dissector in Ethereal 0.8.15 through 0.10.4 allows remote attackers to cause a denial of service (process crash) via a (1) malformed or (2) missing community string, which causes an out-of-bounds read.

cpe:/a:aol:instant_messenger:5.5 cpe:/a:aol:instant_messenger:5.5.3415_beta cpe:/a:aol:instant_messenger:5.5.3595

CVE-2004-0636

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:19.980-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://www.idefense.com/application/poi/display?id=121&type=vulnerabilities CERT-VN VU#735966 XF aim-away-bo(16926) Buffer overflow in the goaway function in the aim:goaway URI handler for AOL Instant Messenger (AIM) 5.5, including 5.5.3595, allows remote attackers to execute arbitrary code via a long Away message.

cpe:/a:oracle:oracle8i:enterprise_8.1.7_.4 cpe:/a:oracle:oracle8i:standard_8.1.7_.4 cpe:/a:oracle:oracle9i:enterprise_9.2.0.4 cpe:/a:oracle:oracle9i:personal_9.2.0.4 cpe:/a:oracle:oracle9i:standard_9.0.1.3 cpe:/a:oracle:oracle9i:standard_9.2.0.4

CVE-2004-0637

2004-09-02T00:00:00.000-04:00

2008-09-10T00:00:00.000-04:00

6.5

NETWORK

LOW

SINGLE_INSTANCE

PARTIAL

http://nvd.nist.gov

2005-06-15T11:54:00.000-04:00

IDEFENSE 20040902 Oracle Database Server ctxsys.driload Access Validation Vulnerability CERT-VN VU#316206 BID 11099 Oracle Database Server 8.1.7.4 through 9.2.0.4 allows local users to execute commands with additional privileges via the ctxsys.driload package, which is publicly accessible.

cpe:/a:oracle:oracle8i:enterprise_8.1.7.4 cpe:/a:oracle:oracle8i:standard_8.1.7.4 cpe:/a:oracle:oracle9i:enterprise_9.0.1.4 cpe:/a:oracle:oracle9i:enterprise_9.0.1.5 cpe:/a:oracle:oracle9i:enterprise_9.2.0.3 cpe:/a:oracle:oracle9i:enterprise_9.2.0.4 cpe:/a:oracle:oracle9i:personal_9.0.1.4 cpe:/a:oracle:oracle9i:personal_9.0.1.5 cpe:/a:oracle:oracle9i:personal_9.2.0.3 cpe:/a:oracle:oracle9i:personal_9.2.0.4 cpe:/a:oracle:oracle9i:standard_9.0.1.4 cpe:/a:oracle:oracle9i:standard_9.0.1.5 cpe:/a:oracle:oracle9i:standard_9.2.0.3 cpe:/a:oracle:oracle9i:standard_9.2.0.4

CVE-2004-0638

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:20.043-04:00

8.5

NETWORK

MEDIUM

SINGLE_INSTANCE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20040905 Buffer Overflow in DBMS_SYSTEM.KSDWRT() in Oracle8i - 9i IDEFENSE 20040902 Oracle Database Server dbms_system.ksdwrt Buffer Overflow Vulnerability CONFIRM http://www.oracle.com/technology/deploy/security/pdf/2004alert68.pdf MISC http://www.red-database-security.com/advisory/advisory_20040903_3.htm BID 11100 XF oracle-dbmssystem-bo(17254) Buffer overflow in the KSDWRTB function in the dbms_system package (dbms_system.ksdwrt) for Oracle 9i Database Server Release 2 9.2.0.3 and 9.2.0.4, 9i Release 1 9.0.1.4 and 9.0.1.5, and 8i Release 1 8.1.7.4, allows remote authorized users to execute arbitrary code via a long second argument.

CVE-2004-0639

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:20.090-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=257973 CONECTIVA CLA-2004:858 BUGTRAQ 20040530 RS-2004-1: SquirrelMail "Content-Type" XSS vulnerability DEBIAN DSA-535 MISC http://www.rs-labs.com/adv/RS-Labs-Advisory-2004-1.txt BID 10450 XF squirrelmail-from-header-xss(16285) Multiple cross-site scripting (XSS) vulnerabilities in Squirrelmail 1.2.10 and earlier allow remote attackers to inject arbitrary HTML or script via (1) the $mailer variable in read_body.php, (2) the $senderNames_part variable in mailbox_display.php, and possibly other vectors including (3) the $event_title variable or (4) the $event_text variable.

cpe:/a:netkit:linux_netkit:0.17 cpe:/a:netkit:linux_netkit:0.17.17 cpe:/a:ssltelnetd:secure_telnet:0.13.1

CVE-2004-0640

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:20.150-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

DEBIAN DSA-529 MISC http://www.idefense.com/application/poi/display?id=114&type=vulnerabilities XF ssltelnetd-format-string(16653) Format string vulnerability in the SSL_set_verify function in telnetd.c for SSLtelnet daemon (SSLtelnetd) 0.13 allows remote attackers to execute arbitrary code.

cpe:/h:thomson:speedtouch:510_adsl_router

CVE-2004-0641

2004-08-05T00:00:00.000-04:00

2017-07-10T21:30:20.197-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov AUSCERT ESB-2004.0504 IDEFENSE 20040805 Thompson SpeedTouch Home ADSL Modem Predictable TCP ISN Generation BID 10881 XF speedtouch-hijack-connection(16919) Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.

cpe:/a:mit:kerberos:5-1.3.4

CVE-2004-0642

2004-09-28T00:00:00.000-04:00

2017-10-10T21:29:30.293-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONECTIVA CLA-2004:860 BUGTRAQ 20040913 [OpenPKG-SA-2004.039] OpenPKG Security Advisory (kerberos) REDHAT RHSA-2004:350 CONFIRM http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-002-dblfree.txt DEBIAN DSA-543 GENTOO GLSA-200409-09 CERT-VN VU#795632 BID 11078 TRUSTIX 2004-0045 CERT TA04-247A XF kerberos-kdc-double-free(17157) Double free vulnerabilities in the error handling code for ASN.1 decoders in the (1) Key Distribution Center (KDC) library and (2) client library for MIT Kerberos 5 (krb5) 1.3.4 and earlier may allow remote attackers to execute arbitrary code.

cpe:/a:mit:kerberos:5-1.3.1

CVE-2004-0643

2004-09-28T00:00:00.000-04:00

2017-10-10T21:29:30.370-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONECTIVA CLA-2004:860 BUGTRAQ 20040913 [OpenPKG-SA-2004.039] OpenPKG Security Advisory (kerberos) REDHAT RHSA-2004:350 CONFIRM http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-002-dblfree.txt DEBIAN DSA-543 GENTOO GLSA-200409-09 CERT-VN VU#866472 BID 11078 TRUSTIX 2004-0045 CERT TA04-247A XF kerberos-krb5rdcred-double-free(17159) Double free vulnerability in the krb5_rd_cred function for MIT Kerberos 5 (krb5) 1.3.1 and earlier may allow local users to execute arbitrary code.

cpe:/a:mit:kerberos:5-1.2.2 cpe:/a:mit:kerberos:5-1.2.3 cpe:/a:mit:kerberos:5-1.2.4 cpe:/a:mit:kerberos:5-1.2.5 cpe:/a:mit:kerberos:5-1.2.6 cpe:/a:mit:kerberos:5-1.2.7 cpe:/a:mit:kerberos:5-1.2.8 cpe:/a:mit:kerberos:5-1.3 cpe:/a:mit:kerberos:5-1.3:alpha1 cpe:/a:mit:kerberos:5-1.3.1 cpe:/a:mit:kerberos:5-1.3.2 cpe:/a:mit:kerberos:5-1.3.3 cpe:/a:mit:kerberos:5-1.3.4

CVE-2004-0644

2004-09-28T00:00:00.000-04:00

2017-10-10T21:29:30.467-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2004:860 BUGTRAQ 20040913 [OpenPKG-SA-2004.039] OpenPKG Security Advisory (kerberos) REDHAT RHSA-2004:350 CONFIRM http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-003-asn1.txt DEBIAN DSA-543 GENTOO GLSA-200409-09 CERT-VN VU#550464 BID 11079 TRUSTIX 2004-0045 CERT TA04-247A XF kerberos-asn1-library-dos(17160) The asn1buf_skiptail function in the ASN.1 decoder library for MIT Kerberos 5 (krb5) 1.2.2 through 1.3.4 allows remote attackers to cause a denial of service (infinite loop) via a certain BER encoding.

cpe:/a:abisource:community_abiword:2.0.3 cpe:/a:abisource:community_abiword:2.0.4 cpe:/a:abisource:community_abiword:2.0.5 cpe:/a:abisource:community_abiword:2.0.6 cpe:/a:abisource:community_abiword:2.0.7 cpe:/a:wvware:wvware:0.7.4 cpe:/a:wvware:wvware:0.7.5 cpe:/a:wvware:wvware:0.7.6 cpe:/a:wvware:wvware:1.0

CVE-2004-0645

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:20.433-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://cpan.cybercomm.nl/pub/gentoo-portage/app-text/wv/files/wv-1.0.0-fix_overflow.patch CONECTIVA CLA-2004:863 GENTOO GLSA-200407-11 DEBIAN DSA-579 CONFIRM http://www.freebsd.org/ports/portaudit/7a5430df-d562-11d8-b479-02e0185c0b53.html IDEFENSE 20040709 wvWare Library Buffer Overflow Vulnerability MANDRAKE MDKSA-2004:077 FEDORA FLSA:1906 XF wvware-wvhandledatetimepicture-bo(16660) Buffer overflow in the wvHandleDateTimePicture function in wv library (wvWare) 0.7.4 through 0.7.6 and 1.0.0 allows remote attackers to execute arbitrary code via a document with a long DateTime field.

cpe:/a:macromedia:coldfusion:6.0 cpe:/a:macromedia:coldfusion:6.1 cpe:/a:macromedia:jrun:3.0 cpe:/a:macromedia:jrun:3.1 cpe:/a:macromedia:jrun:4.0

CVE-2004-0646

2004-12-23T00:00:00.000-05:00

2017-07-10T21:30:20.497-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CERT-VN VU#990200 CONFIRM http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html CONFIRM http://www.macromedia.com/devnet/security/security_zone/mpsb04-09.html BUGTRAQ 20040929 iDEFENSE Security Advisory 09.29.04 - Macromedia JRun 4 mod_jrun Apache Module Buffer Overflow Vulnerability BID 11245 XF coldfusion-jrun-verbose-bo(17485) Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such as (1) mod_jrun and (2) mod_jrun20 for Apache, with verbose logging enabled, allows remote attackers to execute arbitrary code via a long HTTP header Content-Type field or other fields.

cpe:/a:shorewall:shorewall:1.4 cpe:/a:shorewall:shorewall:1.4.1 cpe:/a:shorewall:shorewall:1.4.2 cpe:/a:shorewall:shorewall:1.4.3 cpe:/a:shorewall:shorewall:1.4.3a cpe:/a:shorewall:shorewall:1.4.4 cpe:/a:shorewall:shorewall:1.4.5 cpe:/a:shorewall:shorewall:1.4.6 cpe:/a:shorewall:shorewall:1.4.7 cpe:/a:shorewall:shorewall:1.4.8 cpe:/a:shorewall:shorewall:1.4.9 cpe:/a:shorewall:shorewall:1.4.10 cpe:/a:shorewall:shorewall:2.0 cpe:/a:shorewall:shorewall:2.0.1 cpe:/a:shorewall:shorewall:2.0.2 cpe:/a:shorewall:shorewall:2.0.3

CVE-2004-0647

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:20.543-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MLIST [Shorewall-announce] 20040628 URGENT: Shorewall Security Vulnerability GENTOO GLSA-200407-07 MANDRAKE MDKSA-2004:080 XF shorewall-symlink(16651) shorewall 1.4.10c and earlier, and 2.0.x before 2.0.3a, allows local users to overwrite arbitrary files via a symlink attack on the chains-$$ temporary file.

cpe:/a:mozilla:firefox:0.9.2 cpe:/a:mozilla:mozilla:1.7.1 cpe:/a:mozilla:thunderbird:0.7.2

CVE-2004-0648

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:20.607-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20040707 shell:windows command question BUGTRAQ 20040708 Mozilla Security Advisory 2004-07-08 CIAC O-175 CERT-VN VU#927014 CONFIRM http://www.mozilla.org/projects/security/known-vulnerabilities.html CONFIRM http://www.mozilla.org/security/shell.html XF mozilla-shell-program-execution(16655) Mozilla (Suite) before 1.7.1, Firefox before 0.9.2, and Thunderbird before 0.7.2 allow remote attackers to launch arbitrary programs via a URI referencing the shell: protocol.

cpe:/a:l2tpd:l2tpd:0.62 cpe:/a:l2tpd:l2tpd:0.63 cpe:/a:l2tpd:l2tpd:0.64 cpe:/a:l2tpd:l2tpd:0.65 cpe:/a:l2tpd:l2tpd:0.66 cpe:/a:l2tpd:l2tpd:0.67 cpe:/a:l2tpd:l2tpd:0.68 cpe:/a:l2tpd:l2tpd:0.69 cpe:/o:gentoo:linux:1.4

CVE-2004-0649

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:20.667-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040604 bss-based buffer overflow in l2tpd GENTOO GLSA-200407-17 DEBIAN DSA-530 XF l2tpd-writepacket-bo(16326) Buffer overflow in write_packet in control.c for l2tpd may allow remote attackers to execute arbitrary code.

cpe:/a:newatlanta:servletexec:2.2 cpe:/a:newatlanta:servletexec:3.0

CVE-2004-0650

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:20.713-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CISCO 20040630 Cisco Collaboration Server Vulnerability CERT-VN VU#718896 BID 10639 XF ccs-servletexec-gain-privileges(16553) UploadServlet in Cisco Collaboration Server (CCS) running ServletExec before 3.0E allows remote attackers to upload and execute arbitrary files via a direct call to the UploadServlet URL.

cpe:/a:sun:jre:1.4.2 cpe:/a:sun:jre:1.4.2_3 cpe:/a:sun:sdk:1.4.2 cpe:/a:sun:sdk:1.4.2_03

CVE-2004-0651

2004-08-06T00:00:00.000-04:00

2018-10-30T12:25:22.323-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov HP HPSBUX01044 SUNALERT 57555 CERT-VN VU#118558 HP SSRT4749 BID 10301 XF sun-java-dos(16085) Unknown vulnerability in Sun Java Runtime Environment (JRE) 1.4.2 through 1.4.2_03 allows remote attackers to cause a denial of service (virtual machine hang).

cpe:/a:bea:weblogic_server:7.0 cpe:/a:bea:weblogic_server:7.0::express cpe:/a:bea:weblogic_server:7.0::win32 cpe:/a:bea:weblogic_server:7.0:sp1 cpe:/a:bea:weblogic_server:7.0:sp1:express cpe:/a:bea:weblogic_server:7.0:sp1:win32 cpe:/a:bea:weblogic_server:7.0:sp2 cpe:/a:bea:weblogic_server:7.0:sp2:express cpe:/a:bea:weblogic_server:7.0:sp2:win32 cpe:/a:bea:weblogic_server:7.0:sp3 cpe:/a:bea:weblogic_server:7.0:sp3:express cpe:/a:bea:weblogic_server:7.0:sp3:win32 cpe:/a:bea:weblogic_server:7.0:sp4 cpe:/a:bea:weblogic_server:7.0:sp4:express cpe:/a:bea:weblogic_server:7.0:sp4:win32 cpe:/a:bea:weblogic_server:7.0.0.1 cpe:/a:bea:weblogic_server:7.0.0.1::express cpe:/a:bea:weblogic_server:7.0.0.1::win32 cpe:/a:bea:weblogic_server:7.0.0.1:sp1 cpe:/a:bea:weblogic_server:7.0.0.1:sp1:express cpe:/a:bea:weblogic_server:7.0.0.1:sp1:win32 cpe:/a:bea:weblogic_server:7.0.0.1:sp2 cpe:/a:bea:weblogic_server:7.0.0.1:sp2:express cpe:/a:bea:weblogic_server:7.0.0.1:sp2:win32 cpe:/a:bea:weblogic_server:7.0.0.1:sp3 cpe:/a:bea:weblogic_server:7.0.0.1:sp3:express cpe:/a:bea:weblogic_server:7.0.0.1:sp4 cpe:/a:bea:weblogic_server:7.0.0.1:sp4:express cpe:/a:bea:weblogic_server:8.1 cpe:/a:bea:weblogic_server:8.1::express cpe:/a:bea:weblogic_server:8.1::win32 cpe:/a:bea:weblogic_server:8.1:sp1 cpe:/a:bea:weblogic_server:8.1:sp1:express cpe:/a:bea:weblogic_server:8.1:sp1:win32 cpe:/a:bea:weblogic_server:8.1:sp2 cpe:/a:bea:weblogic_server:8.1:sp2:express cpe:/a:bea:weblogic_server:8.1:sp2:win32

CVE-2004-0652

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:20.840-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_55.00.jsp SECTRACK 1009766 CERT-VN VU#352110 BID 10133 XF bea-gain-privileges(15865) BEA WebLogic Server and WebLogic Express 7.0 through 7.0 Service Pack 4, and 8.1 through 8.1 Service Pack 2, allows attackers to obtain the username and password for booting the server by directly accessing certain internal methods.

cpe:/o:sun:solaris:9.0::sparc

CVE-2004-0653

2004-08-06T00:00:00.000-04:00

2017-10-10T21:29:30.527-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SUNALERT 57587 SUNALERT 101519 CIAC O-172 CERT-VN VU#523710 BID 10606 XF solaris-kerberos-password-plaintext(16450) Solaris 9, when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pam_krb5 as an "auth" module with the debug feature enabled, records passwords in plaintext, which could allow local users to gain other user's passwords by reading log files.

cpe:/o:sun:solaris:7.0::x86 cpe:/o:sun:solaris:8.0::x86 cpe:/o:sun:solaris:9.0::sparc cpe:/o:sun:solaris:9.0::x86 cpe:/o:sun:solaris:9.0:x86_update_2 cpe:/o:sun:sunos:5.7 cpe:/o:sun:sunos:5.8

CVE-2004-0654

2004-08-06T00:00:00.000-04:00

2018-10-30T12:26:22.763-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov SUNALERT 57497 CERT-VN VU#901582 BID 10594 XF solaris-bsm-audit-dos(16483) Unknown vulnerability in the Basic Security Module (BSM), when configured to audit either the Administrative (ad) or the System-Wide Administration (as) audit class in Solaris 7, 8, and 9, allows local users to cause a denial of service (kernel panic).

CVE-2004-0655

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:21.010-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

GENTOO GLSA-200407-01 BID 10644 XF esearch-eupdatedb-symlink(16584) eupdatedb in esearch 0.6.1 and earlier allows local users to create arbitrary files via a symlink attack on the esearchdb.py.tmp temporary file.

cpe:/a:pureftpd:pureftpd:0.96 cpe:/a:pureftpd:pureftpd:1.0 cpe:/a:pureftpd:pureftpd:1.0.1 cpe:/a:pureftpd:pureftpd:1.0.2 cpe:/a:pureftpd:pureftpd:1.0.3 cpe:/a:pureftpd:pureftpd:1.0.4 cpe:/a:pureftpd:pureftpd:1.0.5 cpe:/a:pureftpd:pureftpd:1.0.11 cpe:/a:pureftpd:pureftpd:1.0.12 cpe:/a:pureftpd:pureftpd:1.0.13a cpe:/a:pureftpd:pureftpd:1.0.14 cpe:/a:pureftpd:pureftpd:1.0.15 cpe:/a:pureftpd:pureftpd:1.0.16 cpe:/a:pureftpd:pureftpd:1.0.16a cpe:/a:pureftpd:pureftpd:1.0.16b cpe:/a:pureftpd:pureftpd:1.0.16c cpe:/a:pureftpd:pureftpd:1.0.17a cpe:/a:pureftpd:pureftpd:1.0.18

CVE-2004-0656

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:21.057-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov GENTOO GLSA-200407-04 CONFIRM http://www.pureftpd.org/ XF pure-ftpd-acceptclient-dos(16611) The accept_client function in PureFTPd 1.0.18 and earlier allows remote attackers to cause a denial of service by exceeding the maximum number of connections.

cpe:/a:ntp:ntp

CVE-2004-0657

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:21.120-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov HP SSRT4718 CERT-VN VU#584606 XF ntp-integer-bo(15406) Integer overflow in the NTP daemon (NTPd) before 4.0 causes the NTP server to return the wrong date/time offset when a client requests a date/time that is more than 34 years away from the server's time.

cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.4.0:test1 cpe:/o:linux:linux_kernel:2.4.0:test10 cpe:/o:linux:linux_kernel:2.4.0:test11 cpe:/o:linux:linux_kernel:2.4.0:test12 cpe:/o:linux:linux_kernel:2.4.0:test2 cpe:/o:linux:linux_kernel:2.4.0:test3 cpe:/o:linux:linux_kernel:2.4.0:test4 cpe:/o:linux:linux_kernel:2.4.0:test5 cpe:/o:linux:linux_kernel:2.4.0:test6 cpe:/o:linux:linux_kernel:2.4.0:test7 cpe:/o:linux:linux_kernel:2.4.0:test8 cpe:/o:linux:linux_kernel:2.4.0:test9 cpe:/o:linux:linux_kernel:2.4.1 cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:linux:linux_kernel:2.4.3 cpe:/o:linux:linux_kernel:2.4.4 cpe:/o:linux:linux_kernel:2.4.5 cpe:/o:linux:linux_kernel:2.4.6 cpe:/o:linux:linux_kernel:2.4.7 cpe:/o:linux:linux_kernel:2.4.8 cpe:/o:linux:linux_kernel:2.4.9 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.18::x86 cpe:/o:linux:linux_kernel:2.4.18:pre1 cpe:/o:linux:linux_kernel:2.4.18:pre2 cpe:/o:linux:linux_kernel:2.4.18:pre3 cpe:/o:linux:linux_kernel:2.4.18:pre4 cpe:/o:linux:linux_kernel:2.4.18:pre5 cpe:/o:linux:linux_kernel:2.4.18:pre6 cpe:/o:linux:linux_kernel:2.4.18:pre7 cpe:/o:linux:linux_kernel:2.4.18:pre8 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.19:pre1 cpe:/o:linux:linux_kernel:2.4.19:pre2 cpe:/o:linux:linux_kernel:2.4.19:pre3 cpe:/o:linux:linux_kernel:2.4.19:pre4 cpe:/o:linux:linux_kernel:2.4.19:pre5 cpe:/o:linux:linux_kernel:2.4.19:pre6 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.21:pre1 cpe:/o:linux:linux_kernel:2.4.21:pre4 cpe:/o:linux:linux_kernel:2.4.21:pre7 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.23:pre9 cpe:/o:linux:linux_kernel:2.4.23_ow2 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.24_ow1 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.4.26 cpe:/o:linux:linux_kernel:2.4.27:pre1 cpe:/o:linux:linux_kernel:2.4.27:pre2 cpe:/o:linux:linux_kernel:2.5.0 cpe:/o:linux:linux_kernel:2.5.1 cpe:/o:linux:linux_kernel:2.5.2 cpe:/o:linux:linux_kernel:2.5.3 cpe:/o:linux:linux_kernel:2.5.4 cpe:/o:linux:linux_kernel:2.5.5 cpe:/o:linux:linux_kernel:2.5.6 cpe:/o:linux:linux_kernel:2.5.7 cpe:/o:linux:linux_kernel:2.5.8 cpe:/o:linux:linux_kernel:2.5.9 cpe:/o:linux:linux_kernel:2.5.10 cpe:/o:linux:linux_kernel:2.5.11 cpe:/o:linux:linux_kernel:2.5.12 cpe:/o:linux:linux_kernel:2.5.13 cpe:/o:linux:linux_kernel:2.5.14 cpe:/o:linux:linux_kernel:2.5.15 cpe:/o:linux:linux_kernel:2.5.16 cpe:/o:linux:linux_kernel:2.5.17 cpe:/o:linux:linux_kernel:2.5.18 cpe:/o:linux:linux_kernel:2.5.19 cpe:/o:linux:linux_kernel:2.5.20 cpe:/o:linux:linux_kernel:2.5.21 cpe:/o:linux:linux_kernel:2.5.22 cpe:/o:linux:linux_kernel:2.5.23 cpe:/o:linux:linux_kernel:2.5.24 cpe:/o:linux:linux_kernel:2.5.25 cpe:/o:linux:linux_kernel:2.5.26 cpe:/o:linux:linux_kernel:2.5.27 cpe:/o:linux:linux_kernel:2.5.28 cpe:/o:linux:linux_kernel:2.5.29 cpe:/o:linux:linux_kernel:2.5.30 cpe:/o:linux:linux_kernel:2.5.31 cpe:/o:linux:linux_kernel:2.5.32 cpe:/o:linux:linux_kernel:2.5.33 cpe:/o:linux:linux_kernel:2.5.34 cpe:/o:linux:linux_kernel:2.5.35 cpe:/o:linux:linux_kernel:2.5.36 cpe:/o:linux:linux_kernel:2.5.37 cpe:/o:linux:linux_kernel:2.5.38 cpe:/o:linux:linux_kernel:2.5.39 cpe:/o:linux:linux_kernel:2.5.40 cpe:/o:linux:linux_kernel:2.5.41 cpe:/o:linux:linux_kernel:2.5.42 cpe:/o:linux:linux_kernel:2.5.43 cpe:/o:linux:linux_kernel:2.5.44 cpe:/o:linux:linux_kernel:2.5.45 cpe:/o:linux:linux_kernel:2.5.46 cpe:/o:linux:linux_kernel:2.5.47 cpe:/o:linux:linux_kernel:2.5.48 cpe:/o:linux:linux_kernel:2.5.49 cpe:/o:linux:linux_kernel:2.5.50 cpe:/o:linux:linux_kernel:2.5.51 cpe:/o:linux:linux_kernel:2.5.52 cpe:/o:linux:linux_kernel:2.5.53 cpe:/o:linux:linux_kernel:2.5.54 cpe:/o:linux:linux_kernel:2.5.55 cpe:/o:linux:linux_kernel:2.5.56 cpe:/o:linux:linux_kernel:2.5.57 cpe:/o:linux:linux_kernel:2.5.58 cpe:/o:linux:linux_kernel:2.5.59 cpe:/o:linux:linux_kernel:2.5.60 cpe:/o:linux:linux_kernel:2.5.61 cpe:/o:linux:linux_kernel:2.5.62 cpe:/o:linux:linux_kernel:2.5.63 cpe:/o:linux:linux_kernel:2.5.64 cpe:/o:linux:linux_kernel:2.5.65 cpe:/o:linux:linux_kernel:2.5.66 cpe:/o:linux:linux_kernel:2.5.67 cpe:/o:linux:linux_kernel:2.5.68 cpe:/o:linux:linux_kernel:2.5.69 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.0:test1 cpe:/o:linux:linux_kernel:2.6.0:test10 cpe:/o:linux:linux_kernel:2.6.0:test11 cpe:/o:linux:linux_kernel:2.6.0:test2 cpe:/o:linux:linux_kernel:2.6.0:test3 cpe:/o:linux:linux_kernel:2.6.0:test4 cpe:/o:linux:linux_kernel:2.6.0:test5 cpe:/o:linux:linux_kernel:2.6.0:test6 cpe:/o:linux:linux_kernel:2.6.0:test7 cpe:/o:linux:linux_kernel:2.6.0:test8 cpe:/o:linux:linux_kernel:2.6.0:test9 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.6:rc1 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.7:rc1 cpe:/o:linux:linux_kernel:2.6_test9_cvs

CVE-2004-0658

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:21.183-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040622 linux kernel IEEE1394(Firewire) driver integer overflow XF linux-1394-integer-bo(16480) Integer overflow in the hpsb_alloc_packet function (incorrectly reported as alloc_hpsb_packet) in IEEE 1394 (Firewire) driver 2.4 and 2.6 allows local users to cause a denial of service (crash) and possibly execute arbitrary code via the functions (1) raw1394_write, (2) state_connected, (3) handle_remote_request, or (4) hpsb_make_writebpacket.

cpe:/a:mplayer:mplayer:0.90 cpe:/a:mplayer:mplayer:0.90_pre cpe:/a:mplayer:mplayer:0.90_rc cpe:/a:mplayer:mplayer:0.90_rc4 cpe:/a:mplayer:mplayer:0.91 cpe:/a:mplayer:mplayer:0.92 cpe:/a:mplayer:mplayer:0.92.1 cpe:/a:mplayer:mplayer:0.92_cvs cpe:/a:mplayer:mplayer:1.0_pre1 cpe:/a:mplayer:mplayer:1.0_pre2 cpe:/a:mplayer:mplayer:1.0_pre3 cpe:/a:mplayer:mplayer:1.0_pre3try2 cpe:/a:mplayer:mplayer:1.0_pre4 cpe:/a:mplayer:mplayer:head_cvs

CVE-2004-0659

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:21.247-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040627 MPlayer MeMPlayer.c GENTOO GLSA-200408-01 BID 10615 XF mplayer-common-bo(16532) Buffer overflow in TranslateFilename for common.c in MPlayer 1.0pre4 allows remote attackers to execute arbitrary code via a long file name.

cpe:/a:cutephp:cutenews:0.88 cpe:/a:cutephp:cutenews:1.3 cpe:/a:cutephp:cutenews:1.3.1

CVE-2004-0660

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:21.307-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040628 Cross-Site Scripting CuteNews XF cutenews-id-xss(16525) Cross-site scripting (XSS) vulnerability in (1) show_archives.php, (2) show_news.php, and possibly other php files in CuteNews 1.3.1 allows remote attackers to inject arbitrary script or HTML via the id parameter.

cpe:/h:d-link:di-604 cpe:/h:d-link:di-614%2b:2.30 cpe:/h:d-link:di-624:1.28

CVE-2004-0661

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:21.370-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040628 DLINK 614+ - SOHO routers, DHCP service DOS BUGTRAQ 20040629 Re: DLINK 614+ - SOHO routers, system DOS BID 10621 XF dlink-dhcp-request-dos(16531) Integer signedness error in D-Link AirPlus DI-614+ running firmware 2.30 and earlier allows remote attackers to cause a denial of service (IP lease depletion) via a DHCP request with the LEASETIME option set to -1, which makes the DHCP lease valid for thirteen or more years.

cpe:/a:powerportal:powerportal:1.1b cpe:/a:powerportal:powerportal:1.3 cpe:/a:powerportal:powerportal:1.3b

CVE-2004-0662

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:21.417-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040628 Multiple vulnerabilities PowerPortal BID 10622 MISC http://www.swp-zone.org/archivos/advisory-07.txt XF powerportal-path-disclosure(16529) PowerPortal 1.x allows remote attackers to gain sensitive information via invalid or missing parameters in HTTP requests to (1) resize.php or (2) modules.php, which reveals the path in an error message.

cpe:/a:powerportal:powerportal:1.1b cpe:/a:powerportal:powerportal:1.3 cpe:/a:powerportal:powerportal:1.3b

CVE-2004-0663

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:21.463-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040628 Multiple vulnerabilities PowerPortal XF powerportal-multiple-xss(16528) Cross-site scripting (XSS) vulnerability in modules.php in PowerPortal 1.x allows remote attackers to inject arbitrary script or HTML via the (1) id parameter to the (a) private_messages module; (2) search parameter to the (b) links and (c) content modules; and (3) files parameter to the gallery module.

cpe:/a:powerportal:powerportal:1.1b cpe:/a:powerportal:powerportal:1.3 cpe:/a:powerportal:powerportal:1.3b

CVE-2004-0664

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:21.510-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040628 Multiple vulnerabilities PowerPortal BID 10622 MISC http://www.swp-zone.org/archivos/advisory-07.txt XF powerportal-dotdot-directory-traversal(16530) Directory traversal vulnerability in modules.php in PowerPortal 1.x allows remote attackers to list arbitrary directories via a .. (dot dot) in the files parameter.

cpe:/a:cgiscript.net:csfaq cpe:/a:cgiscript.net:csfaq:1.0

CVE-2004-0665

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:21.557-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040628 Full path disclosure csFAQ BID 10618 MISC http://www.swp-zone.org/archivos/advisory-08.txt XF csfaq-path-disclosure(16526) csFAQ.cgi in csFAQ allows remote attackers to gain sensitive information via an invalid database parameter, which reveals the path to the web server in an error message.

cpe:/a:popclient:popclient:3.0_b6

CVE-2004-0666

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:21.620-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20040629 DoS in popclient 3.0b6 BUGTRAQ 20040629 DoS in popclient 3.0b6 MISC http://www.grok.org.uk/advisories/popclient.html BID 10625 XF popclient-pop3readmsg-offbyone-bo(16538) Off-by-one error in the POP3_readmsg function in popclient 3.0b6 allows remote attackers to cause a denial of service (application crash) via an e-mail message with a certain line length, which leads to a buffer overflow.

cpe:/a:rsbac:rsbac:1.2.2 cpe:/a:rsbac:rsbac:1.2.3 cpe:/o:gentoo:linux:1.4

CVE-2004-0667

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:21.683-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040630 rsbac 1.2.3 jail security problems BUGTRAQ 20040702 Announce: RSBAC v1.2.3 released CONFIRM http://www.rsbac.org/download/bugfixes/ BID 10640 XF rsbac-jail-gain-privileges(16552) Rule Set Based Access Control (RSBAC) 1.2.2 through 1.2.3 allows access to sys_creat, sys_open, and sys_mknod inside jails, which could allow local users to gain elevated privileges.

CVE-2004-0668

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:21.730-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040630 DoS against Domino 6.5.1 BID 10641 XF lotus-domino-web-dos(16596) Web Access in Lotus Domino 6.5.1 allows remote attackers to cause a denial of service (server crash) via a large e-mail message, as demonstrated using a large image attachment.

cpe:/a:ibm:lotus_domino:6.5.0 cpe:/a:ibm:lotus_domino:6.5.1

CVE-2004-0669

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:21.777-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040630 Unprevileged user can change quota on Domino BID 10642 XF lotus-quota-change(16575) Lotus Domino 6.5.0 and 6.5.1, with IMAP enabled, allows remote authenticated users to change their quota by using the IMAP setquota command.

cpe:/h:zyxel:prestige:650hw_31 cpe:/h:zyxel:prestige:650r_11

CVE-2004-0670

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:21.823-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FULLDISC 20040630 DSL router Prestige 650HW-31 BUGTRAQ 20040630 DSL router Prestige 650HW-31 BID 10638 XF zyxel-long-password-dos(16547) Prestige 650HW-31 running Rompager 4.7 software allows remote attackers to cause a denial of service (device reboot) via a long password.

cpe:/a:symantec:brightmail_antispam:6.0

CVE-2004-0671

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:21.887-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040701 Brightmail leaks other user's spam BUGTRAQ 20040714 Ref: http://www.securityfocus.com/archive/1/367866, Jul 1 2004 1:19PM, Subj: Brightmail BID 10657 XF symantec-brightmail-view-mail(16609) Brightmail Spamfilter 6.0 and earlier beta releases allows remote attackers to read mail from other users by modifying the id parameter in a viewMsgDetails.do request.

cpe:/a:netegrity:identityminder:web_5.6 cpe:/a:netegrity:identityminder:web_5.6_sp1 cpe:/a:netegrity:identityminder:web_5.6_sp2 cpe:/a:netegrity:policy_server:5.5

CVE-2004-0672

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:21.933-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040701 [HW-MED] XSS in Netegrity IdentityMinder BID 10645 XF identityminder-xss(16618) Multiple cross-site scripting (XSS) vulnerabilities in the primary and management web interfaces in Netegrity IdentityMinder Web Edition 5.6 allows remote attackers to execute script as other users via (1) script that starts with %00 in the numOfExpressions parameter or (2) the mobjtype parameter.

cpe:/a:simm-comm:sci_photo_chat:3.4.9

CVE-2004-0673

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:21.997-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040702 XSS in SCI Photo Chat Server 3.4.9 BID 10648 XF sci-server-xss(16602) Cross-site scripting (XSS) vulnerability in SCI Photo Chat Server 3.4.9 allows remote attackers to execute arbitrary web script as other users via an invalid request that is echoed in the resulting error message.

cpe:/h:enterasys:xsr-1805:7.0.0.0 cpe:/h:enterasys:xsr-1850:7.0.0.0 cpe:/h:enterasys:xsr-3000

CVE-2004-0674

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:22.073-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040702 Enterasys XSR Security Routers DoS CONFIRM http://www.enterasys.com/support/security/incidents/2004/07/11036.html BID 10653 XF xsr-ip-record-dos(16616) Enterasys XSR-1800 series Security Routers, when running firmware 7.0.0.0 and using Policy-Based Routing, allow remote attackers to cause a denial of service (crash) via a packet with the IP record route option set.

cpe:/a:mcmurtrey_whitaker_and_associates:cart32:2.5a cpe:/a:mcmurtrey_whitaker_and_associates:cart32:2.6 cpe:/a:mcmurtrey_whitaker_and_associates:cart32:3.0 cpe:/a:mcmurtrey_whitaker_and_associates:cart32:3.1 cpe:/a:mcmurtrey_whitaker_and_associates:cart32:3.5 cpe:/a:mcmurtrey_whitaker_and_associates:cart32:3.5_build619 cpe:/a:mcmurtrey_whitaker_and_associates:cart32:3.5a cpe:/a:mcmurtrey_whitaker_and_associates:cart32:3.5a_build710 cpe:/a:mcmurtrey_whitaker_and_associates:cart32:4.4 cpe:/a:mcmurtrey_whitaker_and_associates:cart32:5.0

CVE-2004-0675

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:22.137-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040703 Cart32 Input Validation Flaw in 'GetLatestBuilds?cart32=' Permits Remote Cross-Site Scripting Attacks BID 10617 XF cart32-getlatestbuilds-xss(16535) Cross-site scripting (XSS) vulnerability in (1) cart32.exe or (2) c32web.exe in Cart32 shopping cart allows remote attackers to execute arbitrary web script via the cart32 parameter to a GetLatestBuilds command.

cpe:/a:fastream:netfile_ftp_web_server:6.5.1.980 cpe:/a:fastream:netfile_ftp_web_server:6.5.1.981 cpe:/a:fastream:netfile_ftp_web_server:6.7.2.1085

CVE-2004-0676

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:22.183-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040704 Fastream NETFile FTP/Web Server Input validation Errors MISC http://www.haxorcitos.com/Fastream_advisory.txt BID 10658 XF fastream-mkdir-file-upload(16613) Directory traversal vulnerability in Fastream NETFile FTP/Web Server 6.7.2.1085 and earlier allows remote attackers to create or delete arbitrary files via .. (dot dot) and // (double slash) sequences in the filename parameter.

cpe:/a:fastream:netfile_ftp_web_server:6.7.2.1085

CVE-2004-0677

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:22.247-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040704 Fastream NETFile FTP/Web Server Input validation Errors XF fastream-cd-dos(16615) Fastream NETFile FTP Server 6.7.2.1085 and earlier allows remote attackers to cause a denial of service (temporary hang) via the cd command with an unusual argument, possibly due to multiple leading slashes and/or an access to the floppy drive ("A").

cpe:/a:12planet:chat_server:2.9

CVE-2004-0678

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:22.293-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040705 XSS in 12Planet Chat Server 2.9 BID 10659 XF 12planet-chat-server-xss(16605) Cross-site scripting (XSS) in one2planet.infolet.InfoServlet in 12Planet Chat Server 2.9 allows remote attackers to execute arbitrary script as other users via the page parameter.

cpe:/a:unreal:unrealircd:3.1.1 cpe:/a:unreal:unrealircd:3.1.3 cpe:/a:unreal:unrealircd:3.2 cpe:/a:unreal:unrealircd:3.2_.0_beta_10

CVE-2004-0679

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:22.357-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040705 unreal ircd ip cloaking subsystem vulnerability SREASON 560 MISC http://www.bandecon.com/advisory/unreal.txt BID 10663 CONFIRM http://www.unrealircd.com/ XF unreal-ircd-information-disclosure(16610) The IP cloaking feature (cloak.c) in UnrealIRCd 3.2, and possibly other versions, uses a weak hashing scheme to hide IP addresses, which could allow remote attackers to use brute force methods to gain other user's IP addresses.

cpe:/h:zoom:model_5560_x3_ethernet_adsl_modem

CVE-2004-0680

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:22.417-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040706 backdoor menu on conexant chipset dsl router (Zoom X3) BID 10669 XF conexant-chipset-settings-restore(16639) Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow remote attackers to gain unauthorized access.

cpe:/a:comersus_open_technologies:comersus_cart:5.09

CVE-2004-0681

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:22.463-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040707 Comersus Cart Cross-Site Scripting Vulnerability BID 10674 XF comersus-cart-xss(16646) Multiple cross-site scripting (XSS) vulnerabilities in (1) comersus_customerAuthenticateForm.asp, (2) comersus_backoffice_message.asp, (3) comersus_supportError.asp, or (4) comersus_message.asp in Comersus Cart 5.09 allow remote attackers to execute web script as other users via the message parameter.

cpe:/a:comersus_open_technologies:comersus_cart:5.0.9

CVE-2004-0682

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:22.527-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040707 Comersus Cart Improper Request Handling BID 10674 XF comersus-cart-price-modification(16645) comersus_gatewayPayPal.asp in Comersus Cart 5.09, and possibly other versions before 5.098, allows remote attackers to change the prices of items by directly modifying them in the URL.

cpe:/a:symantec:norton_antivirus:2002 cpe:/a:symantec:norton_antivirus:2003::pro

CVE-2004-0683

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:22.573-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040709 Norton AntiVirus Denial Of Service Vulnerability [Part: !!!] XF nav-compressed-dos(16658) Symantec Norton AntiVirus 2002 and 2003 allows remote attackers to cause a denial of service (CPU consumption) via a compressed archive that contains a large number of directories.

cpe:/a:ibm:websphere_caching_proxy_server:5.0.2 cpe:/a:ibm:websphere_edge_server_caching_proxy:5.0.2

CVE-2004-0684

2004-08-06T00:00:00.000-04:00

2017-07-10T21:30:22.637-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040708 CYBSEC - Security Advisory: Denial of Service in IBM WebSphere MISC http://www.cybsec.com/vuln/IBM-WebSphere-Edge-Server-DOS.pdf XF ibm-edge-caching-dos(16607) WebSphere Edge Component Caching Proxy in WebSphere Edge Server 5.02, with the JunctionRewrite directive enabled, allows remote attackers to cause a denial of service via an HTTP GET request without any parameters.

cpe:/o:linux:linux_kernel:2.2.0 cpe:/o:linux:linux_kernel:2.2.1 cpe:/o:linux:linux_kernel:2.2.2 cpe:/o:linux:linux_kernel:2.2.3 cpe:/o:linux:linux_kernel:2.2.4 cpe:/o:linux:linux_kernel:2.2.5 cpe:/o:linux:linux_kernel:2.2.6 cpe:/o:linux:linux_kernel:2.2.7 cpe:/o:linux:linux_kernel:2.2.8 cpe:/o:linux:linux_kernel:2.2.9 cpe:/o:linux:linux_kernel:2.2.10 cpe:/o:linux:linux_kernel:2.2.11 cpe:/o:linux:linux_kernel:2.2.12 cpe:/o:linux:linux_kernel:2.2.13 cpe:/o:linux:linux_kernel:2.2.14 cpe:/o:linux:linux_kernel:2.2.15 cpe:/o:linux:linux_kernel:2.2.15:pre16 cpe:/o:linux:linux_kernel:2.2.15_pre20 cpe:/o:linux:linux_kernel:2.2.16 cpe:/o:linux:linux_kernel:2.2.16:pre6 cpe:/o:linux:linux_kernel:2.2.17 cpe:/o:linux:linux_kernel:2.2.18 cpe:/o:linux:linux_kernel:2.2.19 cpe:/o:linux:linux_kernel:2.2.20 cpe:/o:linux:linux_kernel:2.2.21 cpe:/o:linux:linux_kernel:2.2.22 cpe:/o:linux:linux_kernel:2.2.23 cpe:/o:linux:linux_kernel:2.2.24 cpe:/o:linux:linux_kernel:2.2.25 cpe:/o:linux:linux_kernel:2.3.0 cpe:/o:linux:linux_kernel:2.3.99 cpe:/o:linux:linux_kernel:2.3.99:pre1 cpe:/o:linux:linux_kernel:2.3.99:pre2 cpe:/o:linux:linux_kernel:2.3.99:pre3 cpe:/o:linux:linux_kernel:2.3.99:pre4 cpe:/o:linux:linux_kernel:2.3.99:pre5 cpe:/o:linux:linux_kernel:2.3.99:pre6 cpe:/o:linux:linux_kernel:2.3.99:pre7 cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.4.0:test1 cpe:/o:linux:linux_kernel:2.4.0:test10 cpe:/o:linux:linux_kernel:2.4.0:test11 cpe:/o:linux:linux_kernel:2.4.0:test12 cpe:/o:linux:linux_kernel:2.4.0:test2 cpe:/o:linux:linux_kernel:2.4.0:test3 cpe:/o:linux:linux_kernel:2.4.0:test4 cpe:/o:linux:linux_kernel:2.4.0:test5 cpe:/o:linux:linux_kernel:2.4.0:test6 cpe:/o:linux:linux_kernel:2.4.0:test7 cpe:/o:linux:linux_kernel:2.4.0:test8 cpe:/o:linux:linux_kernel:2.4.0:test9 cpe:/o:linux:linux_kernel:2.4.1 cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:linux:linux_kernel:2.4.3 cpe:/o:linux:linux_kernel:2.4.4 cpe:/o:linux:linux_kernel:2.4.5 cpe:/o:linux:linux_kernel:2.4.6 cpe:/o:linux:linux_kernel:2.4.7 cpe:/o:linux:linux_kernel:2.4.8 cpe:/o:linux:linux_kernel:2.4.9 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.18::x86 cpe:/o:linux:linux_kernel:2.4.18:pre1 cpe:/o:linux:linux_kernel:2.4.18:pre2 cpe:/o:linux:linux_kernel:2.4.18:pre3 cpe:/o:linux:linux_kernel:2.4.18:pre4 cpe:/o:linux:linux_kernel:2.4.18:pre5 cpe:/o:linux:linux_kernel:2.4.18:pre6 cpe:/o:linux:linux_kernel:2.4.18:pre7 cpe:/o:linux:linux_kernel:2.4.18:pre8 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.19:pre1 cpe:/o:linux:linux_kernel:2.4.19:pre2 cpe:/o:linux:linux_kernel:2.4.19:pre3 cpe:/o:linux:linux_kernel:2.4.19:pre4 cpe:/o:linux:linux_kernel:2.4.19:pre5 cpe:/o:linux:linux_kernel:2.4.19:pre6 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.21:pre1 cpe:/o:linux:linux_kernel:2.4.21:pre4 cpe:/o:linux:linux_kernel:2.4.21:pre7 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.23:pre9 cpe:/o:linux:linux_kernel:2.4.23_ow2 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.24_ow1 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.4.26 cpe:/o:linux:linux_kernel:2.4.27:pre1 cpe:/o:linux:linux_kernel:2.4.27:pre2 cpe:/o:linux:linux_kernel:2.4.27:pre3 cpe:/o:linux:linux_kernel:2.4.27:pre4 cpe:/o:linux:linux_kernel:2.4.27:pre5 cpe:/o:linux:linux_kernel:2.5.0 cpe:/o:linux:linux_kernel:2.5.1 cpe:/o:linux:linux_kernel:2.5.2 cpe:/o:linux:linux_kernel:2.5.3 cpe:/o:linux:linux_kernel:2.5.4 cpe:/o:linux:linux_kernel:2.5.5 cpe:/o:linux:linux_kernel:2.5.6 cpe:/o:linux:linux_kernel:2.5.7 cpe:/o:linux:linux_kernel:2.5.8 cpe:/o:linux:linux_kernel:2.5.9 cpe:/o:linux:linux_kernel:2.5.10 cpe:/o:linux:linux_kernel:2.5.11 cpe:/o:linux:linux_kernel:2.5.12 cpe:/o:linux:linux_kernel:2.5.13 cpe:/o:linux:linux_kernel:2.5.14 cpe:/o:linux:linux_kernel:2.5.15 cpe:/o:linux:linux_kernel:2.5.16 cpe:/o:linux:linux_kernel:2.5.17 cpe:/o:linux:linux_kernel:2.5.18 cpe:/o:linux:linux_kernel:2.5.19 cpe:/o:linux:linux_kernel:2.5.20 cpe:/o:linux:linux_kernel:2.5.21 cpe:/o:linux:linux_kernel:2.5.22 cpe:/o:linux:linux_kernel:2.5.23 cpe:/o:linux:linux_kernel:2.5.24 cpe:/o:linux:linux_kernel:2.5.25 cpe:/o:linux:linux_kernel:2.5.26 cpe:/o:linux:linux_kernel:2.5.27 cpe:/o:linux:linux_kernel:2.5.28 cpe:/o:linux:linux_kernel:2.5.29 cpe:/o:linux:linux_kernel:2.5.30 cpe:/o:linux:linux_kernel:2.5.31 cpe:/o:linux:linux_kernel:2.5.32 cpe:/o:linux:linux_kernel:2.5.33 cpe:/o:linux:linux_kernel:2.5.34 cpe:/o:linux:linux_kernel:2.5.35 cpe:/o:linux:linux_kernel:2.5.36 cpe:/o:linux:linux_kernel:2.5.37 cpe:/o:linux:linux_kernel:2.5.38 cpe:/o:linux:linux_kernel:2.5.39 cpe:/o:linux:linux_kernel:2.5.40 cpe:/o:linux:linux_kernel:2.5.41 cpe:/o:linux:linux_kernel:2.5.42 cpe:/o:linux:linux_kernel:2.5.43 cpe:/o:linux:linux_kernel:2.5.44 cpe:/o:linux:linux_kernel:2.5.45 cpe:/o:linux:linux_kernel:2.5.46 cpe:/o:linux:linux_kernel:2.5.47 cpe:/o:linux:linux_kernel:2.5.48 cpe:/o:linux:linux_kernel:2.5.49 cpe:/o:linux:linux_kernel:2.5.50 cpe:/o:linux:linux_kernel:2.5.51 cpe:/o:linux:linux_kernel:2.5.52 cpe:/o:linux:linux_kernel:2.5.53 cpe:/o:linux:linux_kernel:2.5.54 cpe:/o:linux:linux_kernel:2.5.55 cpe:/o:linux:linux_kernel:2.5.56 cpe:/o:linux:linux_kernel:2.5.57 cpe:/o:linux:linux_kernel:2.5.58 cpe:/o:linux:linux_kernel:2.5.59 cpe:/o:linux:linux_kernel:2.5.60 cpe:/o:linux:linux_kernel:2.5.61 cpe:/o:linux:linux_kernel:2.5.62 cpe:/o:linux:linux_kernel:2.5.63 cpe:/o:linux:linux_kernel:2.5.64 cpe:/o:linux:linux_kernel:2.5.65 cpe:/o:linux:linux_kernel:2.5.66 cpe:/o:linux:linux_kernel:2.5.67 cpe:/o:linux:linux_kernel:2.5.68 cpe:/o:linux:linux_kernel:2.5.69 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.0:test1 cpe:/o:linux:linux_kernel:2.6.0:test10 cpe:/o:linux:linux_kernel:2.6.0:test11 cpe:/o:linux:linux_kernel:2.6.0:test2 cpe:/o:linux:linux_kernel:2.6.0:test3 cpe:/o:linux:linux_kernel:2.6.0:test4 cpe:/o:linux:linux_kernel:2.6.0:test5 cpe:/o:linux:linux_kernel:2.6.0:test6 cpe:/o:linux:linux_kernel:2.6.0:test7 cpe:/o:linux:linux_kernel:2.6.0:test8 cpe:/o:linux:linux_kernel:2.6.0:test9 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.6:rc1 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.7:rc1 cpe:/o:linux:linux_kernel:2.6.8:rc1 cpe:/o:linux:linux_kernel:2.6.8:rc2 cpe:/o:linux:linux_kernel:2.6.8:rc3 cpe:/o:linux:linux_kernel:2.6_test9_cvs cpe:/o:redhat:enterprise_linux:3.0::advanced_servers cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1

CVE-2004-0685

2004-12-23T00:00:00.000-05:00

2017-10-10T21:29:30.683-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127921 DEBIAN DSA-1067 DEBIAN DSA-1069 DEBIAN DSA-1070 DEBIAN DSA-1082 GENTOO GLSA-200408-24 CERT-VN VU#981134 REDHAT RHSA-2004:504 REDHAT RHSA-2004:505 BID 10892 MISC http://www.securityspace.com/smysecure/catid.html?id=14580 TRUSTIX 2004-0041 FEDORA FLSA:2336 XF linux-usb-gain-privileges(16931) Certain USB drivers in the Linux 2.4 kernel use the copy_to_user function on uninitialized structures, which could allow local users to obtain sensitive information by reading memory that was not cleared from previous usage.

CVE-2004-0686

2004-07-27T00:00:00.000-04:00

2018-10-30T12:25:11.107-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONECTIVA CLA-2004:851 CONECTIVA CLA-2004:854 BUGTRAQ 20040722 Security Release - Samba 3.0.5 and 2.2.10 BUGTRAQ 20040722 [OpenPKG-SA-2004.033] OpenPKG Security Advisory (samba) BUGTRAQ 20040722 TSSA-2004-014 - samba HP SSRT4782 FEDORA FLSA:2102 SUNALERT 101584 SUNALERT 57664 GENTOO GLSA-200407-21 MANDRAKE MDKSA-2004:071 SUSE SUSE-SA:2004:022 REDHAT RHSA-2004:259 TRUSTIX 2004-0039 XF samba-mangling-method-bo(16786) Buffer overflow in Samba 2.2.x to 2.2.9, and 3.0.0 to 3.0.4, when the "mangling method = hash" option is enabled in smb.conf, has unknown impact and attack vectors.

cpe:/a:x.org:x11r6:6.7.0 cpe:/a:x.org:x11r6:6.8 cpe:/a:xfree86_project:x11r6:3.3.6 cpe:/a:xfree86_project:x11r6:4.0 cpe:/a:xfree86_project:x11r6:4.0.1 cpe:/a:xfree86_project:x11r6:4.0.2.11 cpe:/a:xfree86_project:x11r6:4.0.3 cpe:/a:xfree86_project:x11r6:4.1.0 cpe:/a:xfree86_project:x11r6:4.1.11 cpe:/a:xfree86_project:x11r6:4.1.12 cpe:/a:xfree86_project:x11r6:4.2.0 cpe:/a:xfree86_project:x11r6:4.2.1 cpe:/a:xfree86_project:x11r6:4.2.1::errata cpe:/a:xfree86_project:x11r6:4.3.0 cpe:/o:openbsd:openbsd:3.4 cpe:/o:openbsd:openbsd:3.5 cpe:/o:suse:suse_linux:8::enterprise_server cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::enterprise_server cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1

CVE-2004-0687

2004-10-20T00:00:00.000-04:00

2018-10-19T11:30:08.470-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONECTIVA CLA-2005:924 CONFIRM http://ftp.x.org/pub/X11R6.8.0/patches/README.xorg-CAN-2004-0687-0688.patch APPLE APPLE-SA-2005-05-03 BUGTRAQ 20040915 CESA-2004-004: libXpm MISC http://scary.beasts.org/security/CESA-2004-003.txt SUNALERT 57653 DEBIAN DSA-560 GENTOO GLSA-200409-34 GENTOO GLSA-200502-07 CERT-VN VU#882750 MANDRAKE MDKSA-2004:098 SUSE SUSE-SA:2004:034 FEDORA FLSA-2006:152803 REDHAT RHSA-2004:537 REDHAT RHSA-2005:004 HP HPSBUX02119 BID 11196 CERT TA05-136A VUPEN ADV-2006-1914 XF libxpm-multiple-stack-bo(17414) UBUNTU USN-27-1 Multiple stack-based buffer overflows in (1) xpmParseColors in parse.c, (2) ParseAndPutPixels in create.c, and (3) ParsePixels in parse.c for libXpm before 6.8.1 allow remote attackers to execute arbitrary code via a malformed XPM image file.

CVE-2004-0688

2004-10-20T00:00:00.000-04:00

2018-10-19T11:30:10.050-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONECTIVA CLA-2005:924 CONFIRM http://ftp.x.org/pub/X11R6.8.0/patches/README.xorg-CAN-2004-0687-0688.patch APPLE APPLE-SA-2005-05-03 BUGTRAQ 20040915 CESA-2004-004: libXpm MISC http://scary.beasts.org/security/CESA-2004-003.txt SUNALERT 57653 DEBIAN DSA-560 GENTOO GLSA-200409-34 GENTOO GLSA-200502-07 CERT-VN VU#537878 MANDRAKE MDKSA-2004:098 SUSE SUSE-SA:2004:034 FEDORA FLSA-2006:152803 REDHAT RHSA-2004:537 REDHAT RHSA-2005:004 HP HPSBUX02119 BID 11196 CERT TA05-136A VUPEN ADV-2006-1914 XF libxpm-xpmfile-integer-overflow(17416) UBUNTU USN-27-1 Multiple integer overflows in (1) the xpmParseColors function in parse.c, (2) XpmCreateImageFromXpmImage, (3) CreateXImage, (4) ParsePixels, and (5) ParseAndPutPixels for libXpm before 6.8.1 may allow remote attackers to execute arbitrary code via a malformed XPM image file.

cpe:/o:kde:kde:3.3.0

CVE-2004-0689

2004-09-28T00:00:00.000-04:00

2017-10-10T21:29:30.997-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONECTIVA CLA-2004:864 BUGTRAQ 20040811 KDE Security Advisories: Temporary File and Konqueror Frame Injection Vulnerabilities GENTOO 200408-13 DEBIAN DSA-539 CONFIRM http://www.kde.org/info/security/advisory-20040811-1.txt XF kde-application-symlink(16963) KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files.

cpe:/o:kde:kde:3.2.1

CVE-2004-0690

2004-09-28T00:00:00.000-04:00

2017-07-10T21:30:23.073-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=261386 CONECTIVA CLA-2004:864 BUGTRAQ 20040811 KDE Security Advisories: Temporary File and Konqueror Frame Injection Vulnerabilities GENTOO 200408-13 CERT-VN VU#330638 CONFIRM http://www.kde.org/info/security/advisory-20040811-2.txt MANDRAKE MDKSA-2004:086 BID 10924 XF kde-dcopserver-symlink(16962) The DCOPServer in KDE 3.2.3 and earlier allows local users to gain unauthorized access via a symlink attack on DCOP files in the /tmp directory.

cpe:/a:trolltech:qt:3.3.3

CVE-2004-0691

2004-09-28T00:00:00.000-04:00

2017-10-10T21:29:31.060-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040818 CESA-2004-004: qt GENTOO GLSA-200408-20 SUNALERT 201610 DEBIAN DSA-542 MANDRAKE MDKSA-2004:085 SUSE SUSE-SA:2004:027 REDHAT RHSA-2004:414 XF qt-bmp-bo(17040) Heap-based buffer overflow in the BMP image format parser for the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code.

cpe:/a:trolltech:qt:3.3.3

CVE-2004-0692

2004-09-28T00:00:00.000-04:00

2017-10-10T21:29:31.123-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FEDORA FLSA:2314 GENTOO GLSA-200408-20 SUNALERT 201610 DEBIAN DSA-542 MANDRAKE MDKSA-2004:085 SUSE SUSE-SA:2004:027 REDHAT RHSA-2004:414 XF qt-xpm-dos(17041) The XPM parser in the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0693.

cpe:/a:trolltech:qt:3.3.3

CVE-2004-0693

2004-09-28T00:00:00.000-04:00

2017-10-10T21:29:31.183-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov GENTOO GLSA-200408-20 SUNALERT 201610 DEBIAN DSA-542 MANDRAKE MDKSA-2004:085 SUSE SUSE-SA:2004:027 REDHAT RHSA-2004:414 XF qt-gif-dos(17042) The GIF parser in the QT library (qt3) before 3.3.3 allows remote attackers to cause a denial of service (application crash) via a malformed image file that triggers a null dereference, a different vulnerability than CVE-2004-0692.

cpe:/a:tsugio_okamoto:lha:1.14

CVE-2004-0694

2011-02-03T20:00:02.883-05:00

2017-10-10T21:29:31.247-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov REDHAT RHSA-2004:323 REDHAT RHSA-2004:440 Buffer overflow in LHA 1.14 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to "command line processing," a different vulnerability than CVE-2004-0771. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries.

CVE-2004-0695

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:23.293-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

MISC ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt ATSTAKE A071304-1 XF 4dwebstar-long-ftp-bo(16686) Stack-based buffer overflow in the FTP service for 4D WebSTAR 5.3.2 and earlier allows remote attackers to execute arbitrary code via a long FTP command.

CVE-2004-0696

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:23.357-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt ATSTAKE A071304-1 BID 10721 XF 4dwebstar-view-directory-listing(16687) The ShellExample.cgi script in 4D WebSTAR 5.3.2 and earlier allows remote attackers to list arbitrary directories via a URL with the desired path and a "*" (asterisk) character.

CVE-2004-0697

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:23.417-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt ATSTAKE A071304-1 XF 4dwebstar-view-phpini-files(16688) Unknown vulnerability in 4D WebSTAR 5.3.2 and earlier allows remote attackers to read the php.ini configuration file and possibly obtain sensitive information.

CVE-2004-0698

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:23.463-04:00

3.6

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC ftp://ftp.4d.com/ACI_PRODUCT_REFERENCE_LIBRARY/4D_PRODUCT_DOCUMENTATION/PDF_Docs_by_4D_Product_A-Z/4D_WebSTAR/Software_Change_History.txt ATSTAKE A071304-1 XF 4dwebstar-symlink(16689) 4D WebSTAR 5.3.2 and earlier allows local users to read and modify arbitrary files via a symlink attack.

cpe:/a:checkpoint:firewall-1:4.1:sp6 cpe:/a:checkpoint:vpn-1

CVE-2004-0699

2004-09-28T00:00:00.000-04:00

2017-07-10T21:30:23.543-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SECTRACK 1010799 CONFIRM http://www.checkpoint.com/techsupport/alerts/asn1.html CIAC O-190 CERT-VN VU#435358 BID 10820 ISS 20040728 Check Point VPN-1 ASN.1 Decoding Remote Compromise XF vpn1-asn1-decoding-bo(16824) Heap-based buffer overflow in ASN.1 decoding library in Check Point VPN-1 products, when Aggressive Mode IKE is implemented, allows remote attackers to execute arbitrary code by initiating an IKE negotiation and then sending an IKE packet with malformed ASN.1 data.

cpe:/a:mod_ssl:mod_ssl:2.3.11 cpe:/a:mod_ssl:mod_ssl:2.4.0 cpe:/a:mod_ssl:mod_ssl:2.4.1 cpe:/a:mod_ssl:mod_ssl:2.4.2 cpe:/a:mod_ssl:mod_ssl:2.4.3 cpe:/a:mod_ssl:mod_ssl:2.4.4 cpe:/a:mod_ssl:mod_ssl:2.4.5 cpe:/a:mod_ssl:mod_ssl:2.4.6 cpe:/a:mod_ssl:mod_ssl:2.4.7 cpe:/a:mod_ssl:mod_ssl:2.4.8 cpe:/a:mod_ssl:mod_ssl:2.4.9 cpe:/a:mod_ssl:mod_ssl:2.4.10 cpe:/a:mod_ssl:mod_ssl:2.5.0 cpe:/a:mod_ssl:mod_ssl:2.5.1 cpe:/a:mod_ssl:mod_ssl:2.6.0 cpe:/a:mod_ssl:mod_ssl:2.6.1 cpe:/a:mod_ssl:mod_ssl:2.6.2 cpe:/a:mod_ssl:mod_ssl:2.6.3 cpe:/a:mod_ssl:mod_ssl:2.6.4 cpe:/a:mod_ssl:mod_ssl:2.6.5 cpe:/a:mod_ssl:mod_ssl:2.6.6 cpe:/a:mod_ssl:mod_ssl:2.7.0 cpe:/a:mod_ssl:mod_ssl:2.7.1 cpe:/a:mod_ssl:mod_ssl:2.8.0 cpe:/a:mod_ssl:mod_ssl:2.8.1 cpe:/a:mod_ssl:mod_ssl:2.8.1.2 cpe:/a:mod_ssl:mod_ssl:2.8.2 cpe:/a:mod_ssl:mod_ssl:2.8.3 cpe:/a:mod_ssl:mod_ssl:2.8.4 cpe:/a:mod_ssl:mod_ssl:2.8.5 cpe:/a:mod_ssl:mod_ssl:2.8.5.1 cpe:/a:mod_ssl:mod_ssl:2.8.5.2 cpe:/a:mod_ssl:mod_ssl:2.8.6 cpe:/a:mod_ssl:mod_ssl:2.8.7 cpe:/a:mod_ssl:mod_ssl:2.8.8 cpe:/a:mod_ssl:mod_ssl:2.8.9 cpe:/a:mod_ssl:mod_ssl:2.8.10 cpe:/a:mod_ssl:mod_ssl:2.8.12 cpe:/a:mod_ssl:mod_ssl:2.8.14 cpe:/a:mod_ssl:mod_ssl:2.8.15 cpe:/a:mod_ssl:mod_ssl:2.8.16 cpe:/a:mod_ssl:mod_ssl:2.8.17 cpe:/a:mod_ssl:mod_ssl:2.8.18 cpe:/o:gentoo:linux:1.4

CVE-2004-0700

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:23.607-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONECTIVA CLA-2004:857 MLIST [apache-modssl] 20040716 [ANNOUNCE] mod_ssl 2.8.19 for Apache 1.3.31 BUGTRAQ 20040716 [OpenPKG-SA-2004.032] OpenPKG Security Advisory (apache) MISC http://packetstormsecurity.org/0407-advisories/modsslFormat.txt MISC http://virulent.siyahsapka.org/ DEBIAN DSA-532 CERT-VN VU#303448 MANDRAKE MDKSA-2004:075 REDHAT RHSA-2004:405 REDHAT RHSA-2004:408 BID 10736 UBUNTU USN-177-1 FEDORA FLSA:1888 XF apache-modssl-format-string(16705) Format string vulnerability in the mod_proxy hook functions function in ssl_engine_log.c in mod_ssl before 2.8.19 for Apache before 1.3.31 may allow remote attackers to execute arbitrary messages via format string specifiers in certain log messages for HTTPS that are handled by the ssl_log function.

cpe:/a:sun:ray_server_software:1.3 cpe:/a:sun:ray_server_software:2.0

CVE-2004-0701

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:23.667-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SUNALERT 53922 CERT-VN VU#100780 BID 7457 XF sun-ray-session-access(11905) Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted, and removed again, which could cause a user session to stay logged in and allow local users to gain unauthorized access.

cpe:/a:mozilla:bugzilla:2.4 cpe:/a:mozilla:bugzilla:2.6 cpe:/a:mozilla:bugzilla:2.8 cpe:/a:mozilla:bugzilla:2.10 cpe:/a:mozilla:bugzilla:2.12 cpe:/a:mozilla:bugzilla:2.14 cpe:/a:mozilla:bugzilla:2.14.1 cpe:/a:mozilla:bugzilla:2.14.2 cpe:/a:mozilla:bugzilla:2.14.3 cpe:/a:mozilla:bugzilla:2.14.4 cpe:/a:mozilla:bugzilla:2.14.5 cpe:/a:mozilla:bugzilla:2.16 cpe:/a:mozilla:bugzilla:2.16.1 cpe:/a:mozilla:bugzilla:2.16.2 cpe:/a:mozilla:bugzilla:2.16.3 cpe:/a:mozilla:bugzilla:2.16.4 cpe:/a:mozilla:bugzilla:2.16.5 cpe:/a:mozilla:bugzilla:2.17 cpe:/a:mozilla:bugzilla:2.17.1 cpe:/a:mozilla:bugzilla:2.17.3 cpe:/a:mozilla:bugzilla:2.17.4 cpe:/a:mozilla:bugzilla:2.17.5 cpe:/a:mozilla:bugzilla:2.17.6 cpe:/a:mozilla:bugzilla:2.17.7

CVE-2004-0702

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:23.730-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040710 [BUGZILLA] Multiple vulnerabilities in Bugzilla 2.16.5 and 2.17.7 BID 10698 XF bugzilla-database-password-disclosure(16673) DBI in Bugzilla 2.17.1 through 2.17.7 displays the database password in an error message when the SQL server is not running, which could allow remote attackers to gain sensitive information.

CVE-2004-0703

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:23.793-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20040710 [BUGZILLA] Multiple vulnerabilities in Bugzilla 2.16.5 and 2.17.7 BID 10698 XF bugzilla-editusers-gain-privileges(16672) Unknown vulnerability in the administrative controls in Bugzilla 2.17.1 through 2.17.7 allows users with "grant membership" privileges to grant memberships to groups that the user does not control.

CVE-2004-0704

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:23.840-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040710 [BUGZILLA] Multiple vulnerabilities in Bugzilla 2.16.5 and 2.17.7 BID 10698 XF bugzilla-product-name-disclosure(16671) Unknown vulnerability in (1) duplicates.cgi and (2) buglist.cgi in Bugzilla 2.16.x before 2.16.6, 2.18 before 2.18rc1, when configured to hide products, allows remote attackers to view hidden products.

CVE-2004-0705

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:23.903-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=235265 BUGTRAQ 20040710 [BUGZILLA] Multiple vulnerabilities in Bugzilla 2.16.5 and 2.17.7 BID 10698 XF bugzilla-edit-xss(16670) Multiple cross-site scripting (XSS) vulnerabilities in (1) editcomponents.cgi, (2) editgroups.cgi, (3) editmilestones.cgi, (4) editproducts.cgi, (5) editusers.cgi, and (6) editversions.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allow remote attackers to execute arbitrary JavaScript as other users via a URL parameter.

CVE-2004-0706

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:23.963-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=235510 BUGTRAQ 20040710 [BUGZILLA] Multiple vulnerabilities in Bugzilla 2.16.5 and 2.17.7 BID 10698 XF bugzilla-chart-view-password(16669) Bugzilla 2.17.5 through 2.17.7 embeds the password in an image URL, which could allow local users to view the password in the web server log files.

CVE-2004-0707

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:24.027-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=244272 BUGTRAQ 20040710 [BUGZILLA] Multiple vulnerabilities in Bugzilla 2.16.5 and 2.17.7 BID 10698 XF bugzilla-editusers-sql-injection(16668) SQL injection vulnerability in editusers.cgi in Bugzilla 2.16.x before 2.16.6, and 2.18 before 2.18rc1, allows remote attackers with privileges to grant membership to any group to execute arbitrary SQL.

cpe:/a:moinmoin:moinmoin:1.1 cpe:/a:moinmoin:moinmoin:1.2 cpe:/a:moinmoin:moinmoin:1.2.1

CVE-2004-0708

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:24.073-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://sourceforge.net/tracker/index.php?func=detail&aid=948103&group_id=8482&atid=108482 GENTOO GLSA-200407-09 BID 10568 XF moinmoin-gain-admin-access(16465) MoinMoin 1.2.1 and earlier allows remote attackers to gain privileges by creating a user with the same name as an existing group that has higher privileges.

cpe:/a:hp:openview_select_access:5.0:patch_4 cpe:/a:hp:openview_select_access:5.1:patch_1 cpe:/a:hp:openview_select_access:5.2 cpe:/a:hp:openview_select_access:6.0

CVE-2004-0709

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:24.120-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CERT-VN VU#205766 HP SSRT4719 BID 10414 XF openview-select-gain-access(16247) HP OpenView Select Access 5.0 through 6.0 does not correctly decode UTF-8 encoded unicode characters in a URL, which could allow remote attackers to bypass access restrictions.

cpe:/o:cisco:ios:12.2%2814%29sy cpe:/o:cisco:ios:12.2%2814%29za cpe:/o:cisco:ios:12.2%2814%29za2 cpe:/o:cisco:ios:12.2%2817a%29sxa cpe:/o:cisco:ios:12.2sxa cpe:/o:cisco:ios:12.2sxb cpe:/o:cisco:ios:12.2sy cpe:/o:cisco:ios:12.2za

CVE-2004-0710

2004-07-27T00:00:00.000-04:00

2017-10-10T21:29:31.293-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CISCO 20040408 Cisco IPSec VPN Services Module Malformed IKE Packet Vulnerability CERT-VN VU#904310 BID 10083 XF cisco-vpnsm-ike-dos(15797) IP Security VPN Services Module (VPNSM) in Cisco Catalyst 6500 Series Switch and the Cisco 7600 Series Internet Routers running IOS before 12.2(17b)SXA, before 12.2(17d)SXB, or before 12.2(14)SY03 could allow remote attackers to cause a denial of service (device crash and reload) via a malformed Internet Key Exchange (IKE) packet.

CVE-2004-0711

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:24.247-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_56.00.jsp CERT-VN VU#184558 BID 10184 XF weblogic-urlpattern-obtain-information(15927) The URL pattern matching feature in BEA WebLogic Server 6.x matches illegal patterns ending in "*" as wildcards as if they were the legal "/*" pattern, which could cause WebLogic 7.x to allow remote attackers to bypass intended access restrictions because the illegal patterns are properly rejected.

CVE-2004-0712

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:24.307-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_58.00.jsp CERT-VN VU#574222 BID 10188 XF weblogic-admin-password-plaintext(15926) The configuration tools (1) config.sh in Unix or (2) config.cmd in Windows for BEA WebLogic Server 8.1 through SP2 create a log file that contains the administrative username and password in cleartext, which could allow local users to gain privileges.

cpe:/a:bea:weblogic_server:6.1 cpe:/a:bea:weblogic_server:6.1::express cpe:/a:bea:weblogic_server:6.1::win32 cpe:/a:bea:weblogic_server:6.1:sp1 cpe:/a:bea:weblogic_server:6.1:sp1:express cpe:/a:bea:weblogic_server:6.1:sp1:win32 cpe:/a:bea:weblogic_server:6.1:sp2 cpe:/a:bea:weblogic_server:6.1:sp2:express cpe:/a:bea:weblogic_server:6.1:sp2:win32 cpe:/a:bea:weblogic_server:6.1:sp3 cpe:/a:bea:weblogic_server:6.1:sp3:express cpe:/a:bea:weblogic_server:6.1:sp3:win32 cpe:/a:bea:weblogic_server:6.1:sp4 cpe:/a:bea:weblogic_server:6.1:sp4:express cpe:/a:bea:weblogic_server:6.1:sp4:win32 cpe:/a:bea:weblogic_server:6.1:sp5 cpe:/a:bea:weblogic_server:6.1:sp5:express cpe:/a:bea:weblogic_server:6.1:sp5:win32 cpe:/a:bea:weblogic_server:6.1:sp6 cpe:/a:bea:weblogic_server:6.1:sp6:win32 cpe:/a:bea:weblogic_server:7.0 cpe:/a:bea:weblogic_server:7.0::express cpe:/a:bea:weblogic_server:7.0::win32 cpe:/a:bea:weblogic_server:7.0:sp1 cpe:/a:bea:weblogic_server:7.0:sp1:express cpe:/a:bea:weblogic_server:7.0:sp1:win32 cpe:/a:bea:weblogic_server:7.0:sp2 cpe:/a:bea:weblogic_server:7.0:sp2:express cpe:/a:bea:weblogic_server:7.0:sp2:win32 cpe:/a:bea:weblogic_server:7.0:sp3 cpe:/a:bea:weblogic_server:7.0:sp3:express cpe:/a:bea:weblogic_server:7.0:sp3:win32 cpe:/a:bea:weblogic_server:7.0:sp4 cpe:/a:bea:weblogic_server:7.0:sp4:express cpe:/a:bea:weblogic_server:7.0:sp4:win32 cpe:/a:bea:weblogic_server:8.1 cpe:/a:bea:weblogic_server:8.1::express cpe:/a:bea:weblogic_server:8.1::win32 cpe:/a:bea:weblogic_server:8.1:sp1 cpe:/a:bea:weblogic_server:8.1:sp1:express cpe:/a:bea:weblogic_server:8.1:sp1:win32 cpe:/a:bea:weblogic_server:8.1:sp2 cpe:/a:bea:weblogic_server:8.1:sp2:express cpe:/a:bea:weblogic_server:8.1:sp2:win32

CVE-2004-0713

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:24.357-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_57.00.jsp CERT-VN VU#658878 BID 10185 XF weblogic-ejb-object-deletion(15928) The remove method in a stateful Enterprise JavaBean (EJB) in BEA WebLogic Server and WebLogic Express version 8.1 through SP2, 7.0 through SP4, and 6.1 through SP6, does not properly check EJB permissions before unexporting a bean, which allows remote authenticated users to remove EJB objects from remote views before the security exception is thrown.

cpe:/a:cisco:optical_networking_systems_software:3.0 cpe:/a:cisco:optical_networking_systems_software:3.1.0 cpe:/a:cisco:optical_networking_systems_software:3.2.0 cpe:/a:cisco:optical_networking_systems_software:3.3.0 cpe:/a:cisco:optical_networking_systems_software:3.4.0 cpe:/a:cisco:optical_networking_systems_software:4.0%281%29 cpe:/a:cisco:optical_networking_systems_software:4.0%282%29 cpe:/a:cisco:optical_networking_systems_software:4.0.0 cpe:/a:cisco:optical_networking_systems_software:4.1%280%29 cpe:/a:cisco:optical_networking_systems_software:4.1%281%29 cpe:/a:cisco:optical_networking_systems_software:4.1%282%29 cpe:/a:cisco:optical_networking_systems_software:4.1%283%29 cpe:/a:cisco:optical_networking_systems_software:4.1.0 cpe:/o:cisco:ios:12.0%2823%29s4 cpe:/o:cisco:ios:12.0%2823%29s5 cpe:/o:cisco:ios:12.0%2824%29s4 cpe:/o:cisco:ios:12.0%2824%29s5 cpe:/o:cisco:ios:12.0%2826%29s1 cpe:/o:cisco:ios:12.0%2827%29s cpe:/o:cisco:ios:12.0%2827%29sv cpe:/o:cisco:ios:12.0%2827%29sv1 cpe:/o:cisco:ios:12.0s cpe:/o:cisco:ios:12.0sv cpe:/o:cisco:ios:12.1%2820%29e cpe:/o:cisco:ios:12.1%2820%29e1 cpe:/o:cisco:ios:12.1%2820%29e2 cpe:/o:cisco:ios:12.1%2820%29ea1 cpe:/o:cisco:ios:12.1%2820%29ec cpe:/o:cisco:ios:12.1%2820%29ec1 cpe:/o:cisco:ios:12.1%2820%29eo cpe:/o:cisco:ios:12.1%2820%29ew cpe:/o:cisco:ios:12.1%2820%29ew1 cpe:/o:cisco:ios:12.1e cpe:/o:cisco:ios:12.1ea cpe:/o:cisco:ios:12.1eb cpe:/o:cisco:ios:12.1ec cpe:/o:cisco:ios:12.1eo cpe:/o:cisco:ios:12.1eu cpe:/o:cisco:ios:12.1ew cpe:/o:cisco:ios:12.2 cpe:/o:cisco:ios:12.2%2812g%29 cpe:/o:cisco:ios:12.2%2812h%29 cpe:/o:cisco:ios:12.2%2820%29s cpe:/o:cisco:ios:12.2%2820%29s1 cpe:/o:cisco:ios:12.2%2821%29 cpe:/o:cisco:ios:12.2%2821a%29 cpe:/o:cisco:ios:12.2%2823%29 cpe:/o:cisco:ios:12.2s cpe:/o:cisco:ios:12.2sw cpe:/o:cisco:ios:12.2zq cpe:/o:cisco:ios:12.3 cpe:/o:cisco:ios:12.3%282%29t3 cpe:/o:cisco:ios:12.3%282%29xc1 cpe:/o:cisco:ios:12.3%282%29xc2 cpe:/o:cisco:ios:12.3%284%29t cpe:/o:cisco:ios:12.3%284%29t1 cpe:/o:cisco:ios:12.3%284%29t2 cpe:/o:cisco:ios:12.3%284%29t3 cpe:/o:cisco:ios:12.3%284%29xd cpe:/o:cisco:ios:12.3%284%29xd1 cpe:/o:cisco:ios:12.3%285%29 cpe:/o:cisco:ios:12.3%285a%29 cpe:/o:cisco:ios:12.3%285a%29b cpe:/o:cisco:ios:12.3%285b%29 cpe:/o:cisco:ios:12.3%286%29 cpe:/o:cisco:ios:12.3b cpe:/o:cisco:ios:12.3t cpe:/o:cisco:ios:12.3xc cpe:/o:cisco:ios:12.3xd cpe:/o:cisco:ios:12.3xe cpe:/o:cisco:ios:12.3xf cpe:/o:cisco:ios:12.3xg cpe:/o:cisco:ios:12.3xh cpe:/o:cisco:ios:12.3xk cpe:/o:cisco:ios:12.3xq cpe:/o:cisco:ons_15454e_optical_transport_platform

CVE-2004-0714

2004-07-27T00:00:00.000-04:00

2018-10-30T12:26:17.310-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CISCO 20040420 Vulnerabilities in SNMP Message Processing CERT-VN VU#162451 BID 10186 CERT TA04-111B XF cisco-ios-snmp-udp-dos(15921) Cisco Internetwork Operating System (IOS) 12.0S through 12.3T attempts to process SNMP solicited operations on improper ports (UDP 162 and a randomly chosen UDP port), which allows remote attackers to cause a denial of service (device reload and memory corruption).

CVE-2004-0715

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:24.497-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://dev2dev.bea.com/resourcelibrary/advisoriesnotifications/BEA04_52.01.jsp SECTRACK 1009763 CERT-VN VU#470470 BID 10130 XF weblogic-authentication-gain-privileges(15861) The WebLogic Authentication provider for BEA WebLogic Server and WebLogic Express 8.1 through SP2 and 7.0 through SP4 does not properly clear member relationships when a group is deleted, which can cause a new group with the same name to have the members of the old group, which allows group members to gain privileges.

cpe:/o:hp:hp-ux:11

CVE-2004-0716

2004-08-06T00:00:00.000-04:00

2008-10-24T00:32:30.423-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://support.entegrity.com/private/patches/dce/ssrt4741.asp ATSTAKE A072204-1 Buffer overflow in the DCE daemon (DCED) for the DCE endpoint mapper (epmap) on HP-UX 11 allows remote attackers to execute arbitrary code via a request with a small fragment length and a large amount of data.

cpe:/a:opera_software:opera_web_browser:7.50 cpe:/a:opera_software:opera_web_browser:7.51

CVE-2004-0717

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:24.543-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

XF http-frame-spoof(1598) Opera 7.51 for Windows and 7.50 for Linux does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.

cpe:/a:firebirdsql:firebird:0.7 cpe:/a:mozilla:mozilla:1.6 cpe:/a:netscape:navigator:7.1

CVE-2004-0718

2004-07-27T00:00:00.000-04:00

2017-10-10T21:29:31.433-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SCO SCOSA-2005.49 CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=246448 FEDORA FLSA:2089 DEBIAN DSA-777 DEBIAN DSA-810 MANDRAKE MDKSA-2004:082 SUSE SUSE-SA:2004:036 REDHAT RHSA-2004:421 BID 15495 XF http-frame-spoof(1598) The (1) Mozilla 1.6, (2) Firebird 0.7, (3) Firefox 0.8, and (4) Netscape 7.1 web browsers do not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.

cpe:/a:microsoft:ie:5.0.1 cpe:/a:microsoft:ie:5.0.1:sp1 cpe:/a:microsoft:ie:5.0.1:sp2 cpe:/a:microsoft:ie:5.0.1:sp3 cpe:/a:microsoft:ie:5.0.1:sp4 cpe:/a:microsoft:ie:5.5 cpe:/a:microsoft:ie:5.5:sp1 cpe:/a:microsoft:ie:5.5:sp2 cpe:/a:microsoft:ie:6.0 cpe:/a:microsoft:ie:6.0:sp1

CVE-2004-0719

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:24.667-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

XF http-frame-spoof(1598) Internet Explorer for Mac 5.2.3, Internet Explorer 6 on Windows XP, and possibly other versions, does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.

cpe:/a:apple:safari:1.2.2

CVE-2004-0720

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:24.713-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

XF http-frame-spoof(1598) Safari 1.2.2 does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.

cpe:/a:kde:konqueror:3.1.3 cpe:/a:kde:konqueror:3.2.2

CVE-2004-0721

2004-07-27T00:00:00.000-04:00

2017-10-10T21:29:31.513-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONECTIVA CLA-2004:864 BUGTRAQ 20040811 KDE Security Advisories: Temporary File and Konqueror Frame Injection Vulnerabilities GENTOO 200408-13 CONFIRM http://www.kde.org/info/security/advisory-20040811-3.txt XF http-frame-spoof(1598) Konqueror 3.1.3, 3.2.2, and possibly other versions does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.

cpe:/a:mozilla:mozilla:1.6 cpe:/a:netscape:navigator:7.0 cpe:/a:netscape:navigator:7.1

CVE-2004-0722

2004-08-18T00:00:00.000-04:00

2017-10-10T21:29:31.577-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SCO SCOSA-2005.49 CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=236618 MISC http://www.idefense.com/application/poi/display?id=117&type=vulnerabilities SUSE SUSE-SA:2004:036 REDHAT RHSA-2004:421 BID 15495 XF mozilla-netscape-soapparameter-bo(16862) Integer overflow in the SOAPParameter object constructor in (1) Netscape version 7.0 and 7.1 and (2) Mozilla 1.6, and possibly earlier versions, allows remote attackers to execute arbitrary code.

cpe:/a:microsoft:java_virtual_machine:5.0.0.3810

CVE-2004-0723

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:24.887-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040710 Covert Channels allow Cross-Site-Java in Microsoft VM BID 10688 XF msjvm-sandbox-bypass(16666) Microsoft Java virtual machine (VM) 5.0.0.3810 allows remote attackers to bypass sandbox restrictions to read or write certain data between applets from different domains via the "GET/Key" and "PUT/Key/Value" commands, aka "cross-site Java."

cpe:/a:valve_software:half-life:1.1.0.4::linux cpe:/a:valve_software:half-life:1.1.0.4::windows cpe:/a:valve_software:half-life:1.1.0.8 cpe:/a:valve_software:half-life:1.1.0.9 cpe:/a:valve_software:half-life:1.1.1.0 cpe:/a:valve_software:half-life_dedicated_server:3.1 cpe:/a:valve_software:half-life_dedicated_server:3.1.0.4::linux cpe:/a:valve_software:half-life_dedicated_server:3.1.0.5::linux cpe:/a:valve_software:half-life_dedicated_server:3.1.0.6::linux cpe:/a:valve_software:half-life_dedicated_server:3.1.0.7::linux cpe:/a:valve_software:half-life_dedicated_server:3.1.0.8::linux cpe:/a:valve_software:half-life_dedicated_server:3.1.0.9::linux cpe:/a:valve_software:half-life_dedicated_server:3.1.1.0::linux cpe:/a:valve_software:half-life_dedicated_server:3.1.1.1c1::linux cpe:/a:valve_software:half-life_dedicated_server:3.1.1.1d::linux cpe:/a:valve_software:half-life_dedicated_server:3.1.1.1e::linux cpe:/a:valve_software:half-life_dedicated_server:3.1.1.1e::win32 cpe:/a:valve_software:half-life_dedicated_server:3.1.3 cpe:/a:valve_software:half-life_dedicated_server:4.1.0.4::win32 cpe:/a:valve_software:half-life_dedicated_server:4.1.0.6::win32 cpe:/a:valve_software:half-life_dedicated_server:4.1.0.7::win32 cpe:/a:valve_software:half-life_dedicated_server:4.1.0.8::win32 cpe:/a:valve_software:half-life_dedicated_server:4.1.0.9::win32 cpe:/a:valve_software:half-life_dedicated_server:4.1.1.0::win32 cpe:/a:valve_software:half-life_dedicated_server:4.1.1.1c1::win32 cpe:/a:valve_software:half-life_dedicated_server:4.1.1.1d_beta::win32 cpe:/a:valve_software:half-life_dedicated_server:4.1.1.1e::linux cpe:/a:valve_software:half-life_dedicated_server:4.1.1.1e::win32

CVE-2004-0724

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:24.933-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040712 Remote crash of Half-Life servers and clients (versions before the 07 July 2004) BID 10700 XF halflife-packet-dos(16674) The Half-Life engine before July 7 2004 allows remote attackers to cause a denial of service (server or client crash) via an empty fragmented packet.

cpe:/a:moodle:moodle:1.1.1 cpe:/a:moodle:moodle:1.2 cpe:/a:moodle:moodle:1.2.1 cpe:/a:moodle:moodle:1.3 cpe:/a:moodle:moodle:1.3.1 cpe:/a:moodle:moodle:1.3.2

CVE-2004-0725

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:24.997-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://cvs.sourceforge.net/viewcvs.py/moodle/moodle/help.php BUGTRAQ 20040713 Moodle XSS Vulnerability BID 10718 XF moodle-help-file-xss(16684) Cross-site scripting (XSS) vulnerability in help.php in Moodle 1.3.2 and 1.4 dev allows remote attackers to inject arbitrary web script or HTML via the file parameter.

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2000::sp1 cpe:/o:microsoft:windows_2000::sp2 cpe:/o:microsoft:windows_2000::sp3 cpe:/o:microsoft:windows_2000::sp4

CVE-2004-0726

2004-07-27T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040711 Media Preview Script Execution Vulnerability BID 10693 XF win2k-media-code-execution(16704) The Windows Media Player control in Microsoft Windows 2000 allows remote attackers to execute arbitrary script in the local computer zone via an ASX filename that contains javascript, which is executed in the local context in a preview panel.

cpe:/a:microsoft:ie:6.0.2800.1106

CVE-2004-0727

2004-07-27T00:00:00.000-04:00

2018-10-12T17:34:59.467-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://freehost07.websamba.com/greyhats/similarmethodnameredir.htm BUGTRAQ 20040711 MSIE Similar Method Name Redirection Cross Site/Zone Scripting CERT-VN VU#207264 CERT TA04-293A MS MS04-038 XF ie-function-redirect-xss(16681) Microsoft Internet Explorer 6.0.2800.1106 on Microsoft Windows XP SP2, and other versions including 5.01 and 5.5, allows remote web servers to bypass zone restrictions and execute arbitrary code in the local computer zone by redirecting a function to another function with the same name, as demonstrated by SimilarMethodNameRedir, aka the "Similar Method Name Redirection Cross Domain Vulnerability."

cpe:/a:microsoft:systems_management_server:1.2 cpe:/a:microsoft:systems_management_server:1.2:sp1 cpe:/a:microsoft:systems_management_server:1.2:sp2 cpe:/a:microsoft:systems_management_server:1.2:sp3 cpe:/a:microsoft:systems_management_server:1.2:sp4 cpe:/a:microsoft:systems_management_server:2.0 cpe:/a:microsoft:systems_management_server:2.0:sp1 cpe:/a:microsoft:systems_management_server:2.50.2726

CVE-2004-0728

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:25.183-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040714 [HV-MED] DoS in Microsoft SMS Client XF sms-remote-service-dos(16696) The Remote Control Client service in Microsoft's Systems Management Server (SMS) 2.50.2726.0 allows remote attackers to cause a denial of service (crash) via a data packet to TCP port 2702 that causes the server to read or write to an invalid memory address.

cpe:/a:phpbb_group:phpbb:2.0.8 cpe:/a:phpbb_group:phpbb:2.0.8a

CVE-2004-0729

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:25.247-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040716 [waraxe-2004-SA#034 - XSS and path full path disclosure in PhpBB 2.0.8] MISC http://www.waraxe.us/index.php?modname=sa&id=34 XF phpbb-indexphp-path-disclosure(16716) XF phpbb-lang-faq-path-disclosure(16720) XF phpbb-usercpviewprofile-path-disclosure(16723) PhpBB 2.0.8 allows remote attackers to gain sensitive information via an invalid (1) category_rows parameter to index.php, (2) faq parameter to faq.php, or (3) ranksrow parameter to profile.php, which reveal the full path in an error message.

cpe:/a:phpbb_group:phpbb:2.0.8 cpe:/a:phpbb_group:phpbb:2.0.8a

CVE-2004-0730

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:25.307-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040716 [waraxe-2004-SA#034 - XSS and path full path disclosure in PhpBB 2.0.8] BID 10738 MISC http://www.waraxe.us/index.php?modname=sa&id=34 XF phpbb-indexphp-xss(16724) XF phpbb-lang-faq-xss(16725) XF phpbb-lang-bbcode-xss(16726) Multiple cross-site scripting (XSS) vulnerabilities in PhpBB 2.0.8 allow remote attackers to inject arbitrary web script or HTML via (1) the cat_title parameter in index.php, (2) the faq[0][0] parameter in lang_faq.php as accessible from faq.php, or (3) the faq[0][0] parameter in lang_bbcode.php as accessible from faq.php.

cpe:/a:francisco_burzi:php-nuke:8.0_final

CVE-2004-0731

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:25.370-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040716 [waraxe-2004-SA#035 - Multiple security holes in PhpNuke - part 2] MISC http://www.waraxe.us/index.php?modname=sa&id=35 XF phpnuke-search-module-xss(16721) Cross-site scripting (XSS) vulnerability in index.php in the Search module for Php-Nuke allows remote attackers to inject arbitrary script as other users via the input field.

cpe:/a:francisco_burzi:php-nuke:8.0_final

CVE-2004-0732

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:25.417-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040716 [waraxe-2004-SA#035 - Multiple security holes in PhpNuke - part 2] MISC http://www.waraxe.us/index.php?modname=sa&id=35 XF phpnuke-search-module-sql-injection(16728) SQL injection vulnerability in index.php in the Search module for Php-Nuke allows remote attackers to execute arbitrary SQL statements via the instory parameter.

cpe:/a:ollydbg:ollydbg:1.0.6 cpe:/a:ollydbg:ollydbg:1.0.8b cpe:/a:ollydbg:ollydbg:1.0.9 cpe:/a:ollydbg:ollydbg:1.10

CVE-2004-0733

2004-07-27T00:00:00.000-04:00

2017-10-10T21:29:31.717-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20040717 [FMADV] Format String Bug in OllyDbg 1.10 BUGTRAQ 20040717 [FMADV] Format String Bug in OllyDbg 1.10 BID 10742 XF ollydbg-outputdebugstring-format-string(16711) EXPLOIT-DB 3757 Format string vulnerability in OllyDbg 1.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers that are directly provided to the OutputDebugString function call.

cpe:/a:extropia:extropia_webstore:1.0 cpe:/a:extropia:extropia_webstore:2.0

CVE-2004-0734

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:25.527-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040717 Web_Store.cgi allows Command Execution BID 10744 XF extropia-webstore-command-execution(16710) Web_Store.cgi allows remote attackers to execute arbitrary commands via shell metacharacters in the page parameter.

cpe:/a:electronic_arts:medal_of_honor_allied_assault:1.0 cpe:/a:electronic_arts:medal_of_honor_allied_assault:1.1 cpe:/a:electronic_arts:medal_of_honor_allied_assault:1.11_v9 cpe:/a:electronic_arts:medal_of_honor_allied_assault:breakthrough_2.40_b cpe:/a:electronic_arts:medal_of_honor_allied_assault:spearhead_2.15

CVE-2004-0735

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:25.573-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040717 Medal of Honor remote buffer-overflow BID 10743 XF medalofhonor-packet-bo(16715) Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Spearhead 2.15 and earlier, when playing on a Local Area Network (LAN), allows remote attackers to execute arbitrary code via vectors such as (1) the getinfo query, (2) the connect packet, and other unknown vectors.

cpe:/a:francisco_burzi:php-nuke:8.0_final

CVE-2004-0736

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:25.637-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040718 [waraxe-2004-SA#036 - Multiple security holes in PhpNuke - part 3] XF phpnuke-asterisk-plus-path-disclosure(16736) The search module in Php-Nuke allows remote attackers to gain sensitive information via the (1) "**" or (2) "+" search patterns, which reveals the path in an error message.

cpe:/a:francisco_burzi:php-nuke:8.0_final

CVE-2004-0737

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:25.683-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040718 [waraxe-2004-SA#036 - Multiple security holes in PhpNuke - part 3] XF phpnuke-search-module-xss(16721) Multiple cross-site scripting vulnerabilities in index.php in the Search module for Php-Nuke allows remote attackers to inject arbitrary web script or HTML via the (1) sid, (2) max, (3) sel1, (4) sel2, (5) sel3, (6) sel4, (7) sel5, (8) match, (9) mod1, (10) mod2, or (11) mod3 parameters.

cpe:/a:francisco_burzi:php-nuke:8.0_final

CVE-2004-0738

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:25.747-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20040718 [waraxe-2004-SA#036 - Multiple security holes in PhpNuke - part 3] XF phpnuke-search-min-sql-injection(16737) Multiple SQL injection vulnerabilities in the Search module in Php-Nuke allow remote attackers to execute arbitrary SQL via the (1) min or (2) categ parameters.

cpe:/a:snapfiles:whisper_ftp_surfer:1.0.7

CVE-2004-0739

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:25.793-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FULLDISC 20040719 Buffer overflow in Whisper FTP Surfer 1.0.7 BUGTRAQ 20040719 Buffer overflow in Whisper FTP Surfer 1.0.7 XF whisper-long-file-name-bo(16742) Buffer overflow in Whisper FTP Surfer 1.0.7 allows remote FTP servers to cause a denial of service (client crash) and possibly execute arbitrary code via a long filename.

cpe:/h:lexmark:t522_network_printer

CVE-2004-0740

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:25.857-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040720 Denial of Service vulnerability in several Lexmark HTTP servers XF lexmark-long-host-bo(16752) The HTTP server in Lexmark T522 and possibly other models allows remote attackers to cause a denial of service (server crash, reload, or hang) via an HTTP header with a long Host field, possibly triggering a buffer overflow.

cpe:/a:lionmax_software:www_file_share_pro:2.6 cpe:/a:lionmax_software:www_file_share_pro:2.40 cpe:/a:lionmax_software:www_file_share_pro:2.41 cpe:/a:lionmax_software:www_file_share_pro:2.42 cpe:/a:lionmax_software:www_file_share_pro:2.46

CVE-2004-0741

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:25.903-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040720 dos_in_file_share_2.6 XF wwwfilesharepro-http-get-dos(16754) LionMax Software WWW File Share Pro 2.60 allows remote attackers to cause a denial of service (crash or hang) via a long URL, possibly triggering a buffer overflow.

cpe:/a:sun:java_system_calendar_server:6.2 cpe:/a:sun:java_system_calendar_server:6.2::x86

CVE-2004-0742

2004-07-27T00:00:00.000-04:00

2017-07-10T21:30:25.963-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SUNALERT 57586 CERT-VN VU#881254 BID 10788 XF sunjavaportal-calendar-gain-access(16776) Sun Java System Portal Server 6.2 (formerly Sun ONE) allows remote authenticated users to obtain Calendar Server privileges and modify Calendar data by changing the display options to a non-default view.

cpe:/o:apple:mac_os_x:10.2 cpe:/o:apple:mac_os_x:10.2.1 cpe:/o:apple:mac_os_x:10.2.2 cpe:/o:apple:mac_os_x:10.2.3 cpe:/o:apple:mac_os_x:10.2.4 cpe:/o:apple:mac_os_x:10.2.5 cpe:/o:apple:mac_os_x:10.2.6 cpe:/o:apple:mac_os_x:10.2.7 cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3 cpe:/o:apple:mac_os_x:10.3.1 cpe:/o:apple:mac_os_x:10.3.2 cpe:/o:apple:mac_os_x:10.3.3 cpe:/o:apple:mac_os_x:10.3.4 cpe:/o:apple:mac_os_x_server:10.2 cpe:/o:apple:mac_os_x_server:10.2.1 cpe:/o:apple:mac_os_x_server:10.2.2 cpe:/o:apple:mac_os_x_server:10.2.3 cpe:/o:apple:mac_os_x_server:10.2.4 cpe:/o:apple:mac_os_x_server:10.2.5 cpe:/o:apple:mac_os_x_server:10.2.6 cpe:/o:apple:mac_os_x_server:10.2.7 cpe:/o:apple:mac_os_x_server:10.2.8 cpe:/o:apple:mac_os_x_server:10.3 cpe:/o:apple:mac_os_x_server:10.3.1 cpe:/o:apple:mac_os_x_server:10.3.2 cpe:/o:apple:mac_os_x_server:10.3.3 cpe:/o:apple:mac_os_x_server:10.3.4

CVE-2004-0743

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:26.027-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2004-09-09 CERT-VN VU#128414 XF safari-web-info-disclosure(16944) Safari in Mac OS X before 10.3.5, after sending form data using the POST method, may re-send the data to a GET method URL if that URL is redirected after the POST data and the user uses the forward or backward buttons, which may cause an information leak.

cpe:/o:apple:mac_os_x:10.2 cpe:/o:apple:mac_os_x:10.2.1 cpe:/o:apple:mac_os_x:10.2.2 cpe:/o:apple:mac_os_x:10.2.3 cpe:/o:apple:mac_os_x:10.2.4 cpe:/o:apple:mac_os_x:10.2.5 cpe:/o:apple:mac_os_x:10.2.6 cpe:/o:apple:mac_os_x:10.2.7 cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3 cpe:/o:apple:mac_os_x:10.3.1 cpe:/o:apple:mac_os_x:10.3.2 cpe:/o:apple:mac_os_x:10.3.3 cpe:/o:apple:mac_os_x:10.3.4 cpe:/o:apple:mac_os_x_server:10.2 cpe:/o:apple:mac_os_x_server:10.2.1 cpe:/o:apple:mac_os_x_server:10.2.2 cpe:/o:apple:mac_os_x_server:10.2.3 cpe:/o:apple:mac_os_x_server:10.2.4 cpe:/o:apple:mac_os_x_server:10.2.5 cpe:/o:apple:mac_os_x_server:10.2.6 cpe:/o:apple:mac_os_x_server:10.2.7 cpe:/o:apple:mac_os_x_server:10.2.8 cpe:/o:apple:mac_os_x_server:10.3 cpe:/o:apple:mac_os_x_server:10.3.1 cpe:/o:apple:mac_os_x_server:10.3.2 cpe:/o:apple:mac_os_x_server:10.3.3 cpe:/o:apple:mac_os_x_server:10.3.4

CVE-2004-0744

2004-11-23T00:00:00.000-05:00

2017-07-10T21:30:26.073-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://digital.net/~gandalf/Rose_Frag_Attack_Explained.txt BUGTRAQ 20040331 IPv4 fragmentation --> The Rose Attack BUGTRAQ 20040427 Source Code To Test IPv4 fragmentation --> The Rose Attack APPLE APPLE-SA-2004-09-09 XF macos-tcp-ip-dos(16946) The TCP/IP Networking component in Mac OS X before 10.3.5 allows remote attackers to cause a denial of service (memory and resource consumption) via a "Rose Attack" that involves sending a subset of small IP fragments that do not form a complete, larger packet.

cpe:/a:tsugio_okamoto:lha:1.14

CVE-2004-0745

2004-09-28T00:00:00.000-04:00

2017-10-10T21:29:31.777-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

GENTOO GLSA-200409-13 REDHAT RHSA-2004:323 REDHAT RHSA-2004:440 FEDORA FLSA:1833 XF lha-metacharacter-command-execution(17198) LHA 1.14 and earlier allows attackers to execute arbitrary commands via a directory with shell metacharacters in its name.

cpe:/a:kde:konqueror:3.0 cpe:/a:kde:konqueror:3.0.1 cpe:/a:kde:konqueror:3.0.2 cpe:/a:kde:konqueror:3.0.3 cpe:/a:kde:konqueror:3.0.5 cpe:/a:kde:konqueror:3.0.5b cpe:/a:kde:konqueror:3.1 cpe:/a:kde:konqueror:3.1.1 cpe:/a:kde:konqueror:3.1.2 cpe:/a:kde:konqueror:3.1.3 cpe:/a:kde:konqueror:3.1.5 cpe:/a:kde:konqueror:3.2.1 cpe:/a:kde:konqueror:3.2.3 cpe:/o:gentoo:linux:1.4 cpe:/o:kde:kde:3.1.3 cpe:/o:kde:kde:3.2 cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:9.2::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:suse:suse_linux:8::enterprise_server cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::enterprise_server cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1

CVE-2004-0746

2004-10-20T00:00:00.000-04:00

2017-10-10T21:29:31.840-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONECTIVA CLA-2004:864 BUGTRAQ 20040823 KDE Security Advisory: Konqueror Cross-Domain Cookie Injection CONFIRM http://www.kde.org/info/security/advisory-20040823-1.txt MANDRAKE MDKSA-2004:086 BID 10991 XF kde-konqueror-cookie-set(17063) Konqueror in KDE 3.2.3 and earlier allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk and .firm.in, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.

cpe:/a:apache:http_server:2.0 cpe:/a:apache:http_server:2.0.28 cpe:/a:apache:http_server:2.0.32 cpe:/a:apache:http_server:2.0.35 cpe:/a:apache:http_server:2.0.36 cpe:/a:apache:http_server:2.0.37 cpe:/a:apache:http_server:2.0.38 cpe:/a:apache:http_server:2.0.39 cpe:/a:apache:http_server:2.0.40 cpe:/a:apache:http_server:2.0.41 cpe:/a:apache:http_server:2.0.42 cpe:/a:apache:http_server:2.0.43 cpe:/a:apache:http_server:2.0.44 cpe:/a:apache:http_server:2.0.45 cpe:/a:apache:http_server:2.0.46 cpe:/a:apache:http_server:2.0.47 cpe:/a:apache:http_server:2.0.48 cpe:/a:apache:http_server:2.0.49 cpe:/a:apache:http_server:2.0.50

CVE-2004-0747

2004-10-20T00:00:00.000-04:00

2017-10-10T21:29:31.903-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

SECTRACK 1011303 MISC http://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=205147 GENTOO GLSA-200409-21 CERT-VN VU#481998 MANDRAKE MDKSA-2004:096 SUSE SUSE-SA:2004:032 REDHAT RHSA-2004:463 TRUSTIX 2004-0047 VUPEN ADV-2009-1233 XF apache-env-configuration-bo(17384) MLIST [httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html MLIST [httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html Buffer overflow in Apache 2.0.50 and earlier allows local users to gain apache privileges via a .htaccess file that causes the overflow during expansion of environment variables.

CVE-2004-0748

2004-10-20T00:00:00.000-04:00

2018-05-02T21:29:26.317-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov GENTOO GLSA-200409-21 MANDRAKE MDKSA-2004:096 SUSE SUSE-SA:2004:030 REDHAT RHSA-2004:349 TRUSTIX 2004-0047 CONFIRM https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=130750 XF apache-modssl-dos(17200) MLIST [httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html MLIST [httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html mod_ssl in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (CPU consumption) by aborting an SSL connection in a way that causes an Apache child process to enter an infinite loop.

cpe:/a:subversion:subversion:1.0 cpe:/a:subversion:subversion:1.0.1 cpe:/a:subversion:subversion:1.0.2 cpe:/a:subversion:subversion:1.0.3 cpe:/a:subversion:subversion:1.0.4 cpe:/a:subversion:subversion:1.0.5 cpe:/a:subversion:subversion:1.0.6 cpe:/a:subversion:subversion:1.0.7 cpe:/a:subversion:subversion:1.1.0_rc1 cpe:/a:subversion:subversion:1.1.0_rc2 cpe:/a:subversion:subversion:1.1.0_rc3 cpe:/o:gentoo:linux:0.5 cpe:/o:gentoo:linux:0.7 cpe:/o:gentoo:linux:1.1a cpe:/o:gentoo:linux:1.2 cpe:/o:gentoo:linux:1.4 cpe:/o:gentoo:linux:1.4:rc1 cpe:/o:gentoo:linux:1.4:rc2 cpe:/o:gentoo:linux:1.4:rc3

CVE-2004-0749

2004-12-23T00:00:00.000-05:00

2017-07-10T21:30:26.387-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FEDORA FEDORA-2004-318 CONFIRM http://subversion.tigris.org/security/CAN-2004-0749-advisory.txt GENTOO GLSA-200409-35 BID 11243 XF subversion-information-disclosure(17472) The mod_authz_svn module in Subversion 1.0.7 and earlier does not properly restrict access to all metadata on unreadable paths, which could allow remote attackers to gain sensitive information via (1) svn log -v, (2) svn propget, or (3) svn blame, and other commands that follow renames.

cpe:/o:redhat:enterprise_linux:3.0::advanced_servers cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation cpe:/o:redhat:enterprise_linux_desktop:3.0

CVE-2004-0750

2004-10-20T00:00:00.000-04:00

2018-10-19T11:30:11.627-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

REDHAT RHSA-2004:434 FEDORA FLSA:152787 BID 11240 XF red-hat-permission-gain-privileges(17478) Unknown vulnerability in redhat-config-nfs before 1.0.13, when shares are exported to multiple hosts, can produce incorrect permissions and prevent the all_squash option from being applied.

CVE-2004-0751

2004-10-20T00:00:00.000-04:00

2017-10-10T21:29:32.043-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040911 Remote buffer overflow in Apache mod_ssl when reverse proxying SSL CONFIRM http://issues.apache.org/bugzilla/show_bug.cgi?id=30134 GENTOO GLSA-200409-21 MANDRAKE MDKSA-2004:096 SUSE SUSE-SA:2004:030 REDHAT RHSA-2004:463 TRUSTIX 2004-0047 XF apache-modssl-speculative-dos(17273) MLIST [httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html MLIST [httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html The char_buffer_read function in the mod_ssl module for Apache 2.x, when using reverse proxying to an SSL server, allows remote attackers to cause a denial of service (segmentation fault).

cpe:/a:openoffice:openoffice:1.1.2

CVE-2004-0752

2004-10-20T00:00:00.000-04:00

2017-10-10T21:29:32.107-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040910 OpenOffice World-Readable Temporary Files Disclose Files to Local Users SECTRACK 1011205 CONFIRM http://www.openoffice.org/issues/show_bug.cgi?id=33357 REDHAT RHSA-2004:446 BID 11151 XF openofficeorg-tmpfile-insecure-permissions(17312) OpenOffice (OOo) 1.1.2 creates predictable directory names with insecure permissions during startup, which may allow local users to read or list files of other users.

cpe:/a:gnome:gdkpixbuf:0.17 cpe:/a:gnome:gdkpixbuf:0.18 cpe:/a:gnome:gdkpixbuf:0.20 cpe:/a:gnome:gdkpixbuf:0.22 cpe:/a:gtk:gtk%2b:2.0.2 cpe:/a:gtk:gtk%2b:2.0.6 cpe:/a:gtk:gtk%2b:2.2.1 cpe:/a:gtk:gtk%2b:2.2.3 cpe:/a:gtk:gtk%2b:2.2.4

CVE-2004-0753

2004-10-20T00:00:00.000-04:00

2018-10-19T11:30:11.923-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2004:875 DEBIAN DSA-546 CERT-VN VU#825374 MANDRAKE MDKSA-2004:095 MANDRIVA MDKSA-2005:214 REDHAT RHSA-2004:447 REDHAT RHSA-2004:466 FEDORA FLSA-2005:155510 BID 11195 FEDORA FLSA:2005 XF gtk-bmp-dos(17383) The BMP image processor for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (infinite loop) via a crafted BMP file.

CVE-2004-0754

2004-10-20T00:00:00.000-04:00

2017-10-10T21:29:32.217-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://gaim.sourceforge.net/security/?id=2 SECTRACK 1011083 FEDORA FEDORA-2004-278 FEDORA FEDORA-2004-279 GENTOO GLSA-200408-27 REDHAT RHSA-2004:400 BID 11056 XF gaim-groupware-integer-overflow(17140) Integer overflow in Gaim before 0.82 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the size variable in Groupware server messages.

cpe:/a:yukihiro_matsumoto:ruby:1.6 cpe:/a:yukihiro_matsumoto:ruby:1.8

CVE-2004-0755

2004-10-20T00:00:00.000-04:00

2017-10-10T21:29:32.277-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov DEBIAN DSA-537 GENTOO GLSA-200409-08 MANDRAKE MDKSA-2004:128 XF ruby-filestore-pstore-insecure-permission(16996) The FileStore capability in CGI::Session for Ruby before 1.8.1, and possibly PStore, creates files with insecure permissions, which can allow local users to steal session information and hijack sessions.

CVE-2004-0756

2017-05-11T10:29:01.790-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:mozilla:1.7 cpe:/a:mozilla:thunderbird:0.7

CVE-2004-0757

2004-08-18T00:00:00.000-04:00

2017-10-10T21:29:32.357-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SCO SCOSA-2005.49 CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=229374 FEDORA FLSA:2089 CERT-VN VU#561022 CONFIRM http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7 SUSE SUSE-SA:2004:036 REDHAT RHSA-2004:421 BID 15495 XF mozilla-senduidl-pop3-bo(16869) Heap-based buffer overflow in the SendUidl in the POP3 capability for Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, may allow remote POP3 mail servers to execute arbitrary code.

cpe:/a:mozilla:mozilla

CVE-2004-0758

2004-08-18T00:00:00.000-04:00

2017-10-10T21:29:32.417-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SCO SCOSA-2005.49 CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=249004 FEDORA FLSA:2089 GENTOO GLSA-200408-22 CERT-VN VU#784278 CONFIRM http://www.mozilla.org/projects/security/known-vulnerabilities.html SUSE SUSE-SA:2004:036 REDHAT RHSA-2004:421 BID 15495 CONFIRM https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127186 XF mozilla-certificate-dos(16706) Mozilla 1.5 through 1.7 allows a CA certificate to be imported even when their DN is the same as that of the built-in CA root certificate, which allows remote attackers to cause a denial of service to SSL pages because the malicious certificate is treated as invalid.

cpe:/a:mozilla:mozilla

CVE-2004-0759

2004-08-18T00:00:00.000-04:00

2017-10-10T21:29:32.513-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SCO SCOSA-2005.49 CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=241924 FEDORA FLSA:2089 CONFIRM http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7 SUSE SUSE-SA:2004:036 REDHAT RHSA-2004:421 BID 15495 XF mozilla-warning-file-upload(16870) Mozilla before 1.7 allows remote web servers to read arbitrary files via Javascript that sets the value of an <input type="file"> tag.

cpe:/a:mozilla:mozilla

CVE-2004-0760

2004-08-18T00:00:00.000-04:00

2017-10-10T21:29:32.590-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SCO SCOSA-2005.49 CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=250906 FEDORA FLSA:2089 SUSE SUSE-SA:2004:036 REDHAT RHSA-2004:421 BID 15495 XF mozilla-modify-mime-type(16691) Mozilla allows remote attackers to cause Mozilla to open a URI as a different MIME type than expected via a null character (%00) in an FTP URI.

cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:mozilla:1.7 cpe:/a:mozilla:thunderbird:0.7

CVE-2004-0761

2004-08-18T00:00:00.000-04:00

2017-10-10T21:29:32.667-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SCO SCOSA-2005.49 CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=240053 FEDORA FLSA:2089 CONFIRM http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7 SUSE SUSE-SA:2004:036 REDHAT RHSA-2004:421 BID 15495 XF mozilla-redirect-ssl-spoof(16871) Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote attackers to use certain redirect sequences to spoof the security lock icon that makes a web page appear to be encrypted.

cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:mozilla:1.7 cpe:/a:mozilla:thunderbird:0.7

CVE-2004-0762

2004-08-18T00:00:00.000-04:00

2017-10-10T21:29:32.810-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SCO SCOSA-2005.49 FULLDISC 20040407 Race conditions in security dialogs CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=162020 FEDORA FLSA:2089 CONFIRM http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7 SUSE SUSE-SA:2004:036 REDHAT RHSA-2004:421 BID 15495 MISC http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/ XF mozilla-dialog-code-execution(16623) Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to install arbitrary extensions by using interactive events to manipulate the XPInstall Security dialog box.

cpe:/a:mozilla:firefox:0.9.1 cpe:/a:mozilla:firefox:0.9.2

CVE-2004-0763

2004-08-18T00:00:00.000-04:00

2017-10-10T21:29:32.903-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SCO SCOSA-2005.49 CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=253121 FULLDISC 20040725 Mozilla Firefox Certificate Spoofing BUGTRAQ 20040726 Mozilla Firefox Certificate Spoofing FEDORA FLSA:2089 MISC http://www.cipher.org.uk/index.php?p=advisories/Certificate_Spoofing_Mozilla_FireFox_25-07-2004.advisory GENTOO GLSA-200408-22 CONFIRM http://www.mozilla.org/projects/security/known-vulnerabilities.html SUSE SUSE-SA:2004:036 REDHAT RHSA-2004:421 BID 15495 XF mozilla-ssl-certificate-spoofing(16796) Mozilla Firefox 0.9.1 and 0.9.2 allows remote web sites to spoof certificates of trusted web sites via redirects and Javascript that uses the "onunload" method.

cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:mozilla:1.7 cpe:/a:mozilla:thunderbird:0.7

CVE-2004-0764

2004-08-18T00:00:00.000-04:00

2017-10-10T21:29:32.980-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SCO SCOSA-2005.49 CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=244965 FEDORA FLSA:2089 CERT-VN VU#262350 CONFIRM http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7 SUSE SUSE-SA:2004:036 REDHAT RHSA-2004:421 BID 10832 BID 15495 XF mozilla-user-interface-spoofing(16837) Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, allow remote web sites to hijack the user interface via the "chrome" flag and XML User Interface Language (XUL) files.

cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:mozilla:1.7 cpe:/a:mozilla:thunderbird:0.7

CVE-2004-0765

2004-08-18T00:00:00.000-04:00

2017-10-10T21:29:33.043-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=234058 FEDORA FLSA:2089 CONFIRM http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7 SUSE SUSE-SA:2004:036 REDHAT RHSA-2004:421 XF mozilla-certtesthostname-certificate-spoof(16868) The cert_TestHostName function in Mozilla before 1.7, Firefox before 0.9, and Thunderbird before 0.7, only checks the hostname portion of a certificate when the hostname portion of the URI is not a fully qualified domain name (FQDN), which allows remote attackers to spoof trusted certificates.

cpe:/a:ngsec:stackdefender:2.0

CVE-2004-0766

2004-08-18T00:00:00.000-04:00

2017-07-10T21:30:27.370-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://www.idefense.com/application/poi/display?id=119&type=vulnerabilities&flashstatus=false XF stackdefender-baseaddress-dos(16892) NGSEC StackDefender 2.0 allows attackers to cause a denial of service (system crash) via an invalid address for the BaseAddress parameter to the hooks for the (1) ZwAllocateVirtualMemory or (2) ZwProtectVirtualMemory functions.

cpe:/a:ngsec:stackdefender:1.10

CVE-2004-0767

2004-08-18T00:00:00.000-04:00

2017-07-10T21:30:27.433-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://www.idefense.com/application/poi/display?id=118&type=vulnerabilities&flashstatus=false XF stackdefender-objectattributes-dos(16879) NGSEC StackDefender 1.10 allows attackers to cause a denial of service (system crash) via an invalid address for the ObjectAttribues parameter to the hooks for the (1) ZwCreateFile or (2) ZwOpenFile functions.

cpe:/a:greg_roelofs:libpng3:1.2.0 cpe:/a:greg_roelofs:libpng3:1.2.1 cpe:/a:greg_roelofs:libpng3:1.2.2 cpe:/a:greg_roelofs:libpng3:1.2.3 cpe:/a:greg_roelofs:libpng3:1.2.4 cpe:/a:greg_roelofs:libpng3:1.2.5

CVE-2004-0768

2004-10-20T00:00:00.000-04:00

2017-07-10T21:30:27.480-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

GENTOO GLSA-200812-15 DEBIAN DSA-536 FEDORA FLSA:1943 XF libpng-offset-bo(16914) libpng 1.2.5 and earlier does not properly calculate certain buffer offsets, which could allow remote attackers to execute arbitrary code via a buffer overflow attack.

cpe:/a:mozilla:bugzilla

CVE-2004-0769

2004-08-18T00:00:00.000-04:00

2017-10-10T21:29:33.107-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://bugs.gentoo.org/show_bug.cgi?id=51285 MISC http://lw.ftw.zamosc.pl/lha-exploit.txt BUGTRAQ 20040616 Re: [SECURITY] [DSA 515-1] New lha packages fix several vulnerabilities; Re: GENTOO GLSA-200409-13 REDHAT RHSA-2004:323 REDHAT RHSA-2004:440 FEDORA FLSA:1833 XF lha-long-pathname-bo(16917) Buffer overflow in LHA allows remote attackers to execute arbitrary code via long pathnames in LHarc format 2 headers for a .LHZ archive, as originally demonstrated using the "x" option but also exploitable through "l" and "v", and fixed in header.c, a different issue than CVE-2004-0771.

cpe:/a:dgen:emulator:1.15 cpe:/a:dgen:emulator:1.16 cpe:/a:dgen:emulator:1.17 cpe:/a:dgen:emulator:1.18 cpe:/a:dgen:emulator:1.20 cpe:/a:dgen:emulator:1.20_a cpe:/a:dgen:emulator:1.21 cpe:/a:dgen:emulator:1.22 cpe:/a:dgen:emulator:1.23 cpe:/o:debian:debian_linux:3.0 cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::hppa cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::sparc

CVE-2004-0770

2005-01-10T00:00:00.000-05:00

2017-07-10T21:30:27.590-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=263282&archive=yes BID 10855 XF dgen-rom-decompression-symlink(16884) romload.c in DGen Emulator 1.23 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files during decompression of (1) gzip or (2) bzip ROM files.

cpe:/a:tsugio_okamoto:lha:1.14 cpe:/a:tsugio_okamoto:lha:1.15 cpe:/a:tsugio_okamoto:lha:1.17

CVE-2004-0771

2004-11-23T00:00:00.000-05:00

2017-10-10T21:29:33.170-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://bugs.gentoo.org/show_bug.cgi?id=51285 BUGTRAQ 20040606 Re: [SECURITY] [DSA 515-1] New lha packages fix several GENTOO GLSA-200409-13 REDHAT RHSA-2004:323 REDHAT RHSA-2004:440 BUGTRAQ 20040515 lha buffer overflow(s) again BID 10354 FEDORA FLSA:1833 XF lha-extractone-bo(16196) Buffer overflow in the extract_one function from lhext.c in LHA may allow attackers to execute arbitrary code via a long w (working directory) command line option, a different issue than CVE-2004-0769. NOTE: this issue may be REJECTED if there are not any cases in which LHA is setuid or is otherwise used across security boundaries.

cpe:/a:mit:kerberos:1.0 cpe:/a:mit:kerberos:1.0.8mit cpe:/a:mit:kerberos:1.2.2.beta1 cpe:/a:mit:kerberos:5-1.2 cpe:/a:mit:kerberos:5-1.2.1 cpe:/a:mit:kerberos:5-1.2.2 cpe:/a:mit:kerberos:5-1.2.3 cpe:/a:mit:kerberos:5-1.2.4 cpe:/a:mit:kerberos:5-1.2.5 cpe:/a:mit:kerberos:5-1.2.6 cpe:/a:mit:kerberos:5-1.2.7 cpe:/a:mit:kerberos:5-1.2.8 cpe:/a:mit:kerberos:5-1.3 cpe:/a:mit:kerberos:5-1.3:alpha1 cpe:/a:mit:kerberos:5-1.3.1 cpe:/a:mit:kerberos:5-1.3.2 cpe:/a:mit:kerberos:5-1.3.3 cpe:/a:mit:kerberos:5-1.3.4 cpe:/a:mit:kerberos:5_1.0.6 cpe:/a:mit:kerberos:5_1.1.1

CVE-2004-0772

2004-10-20T00:00:00.000-04:00

2017-10-10T21:29:33.247-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONECTIVA CLA-2004:860 BUGTRAQ 20040913 [OpenPKG-SA-2004.039] OpenPKG Security Advisory (kerberos) CONFIRM http://web.mit.edu/kerberos/www/advisories/MITKRB5-SA-2004-002-dblfree.txt DEBIAN DSA-543 GENTOO GLSA-200409-09 CERT-VN VU#350792 MANDRAKE MDKSA-2004:088 BID 11078 TRUSTIX 2004-0045 CERT TA04-247A XF kerberos-krb524d-double-free(17158) Double free vulnerabilities in error handling code in krb524d for MIT Kerberos 5 (krb5) 1.2.8 and earlier may allow remote attackers to execute arbitrary code.

cpe:/a:realnetworks:helix_universal_mobile_server_and_gateway:10.3.1.716 cpe:/a:realnetworks:helix_universal_server:9.0.2 cpe:/a:realnetworks:helix_universal_server:9.0.4.958

CVE-2004-0774

2004-11-03T00:00:00.000-05:00

2017-07-10T21:30:27.793-04:00

7.8

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov IDEFENSE 20041007 RealNetworks Helix Server Content-Length Denial of Service Vulnerability XF helix-post-dos(17648) RealNetworks Helix Universal Server 9.0.2 for Linux and 9.0.3 for Windows allows remote attackers to cause a denial of service (CPU and memory exhaustion) via a POST request with a Content-Length header set to -1.

cpe:/a:widcomm:bluetooth_communication_software:1.4.1.03 cpe:/a:widcomm:btstackserver:1.3.2.7 cpe:/a:widcomm:btstackserver:1.4.2.10

CVE-2004-0775

2004-10-20T00:00:00.000-04:00

2018-10-19T11:30:12.580-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

VULNWATCH 20040811 ptl-2004-03: WIDCOMM Bluetooth Connectivity Software Buffer Overflows BUGTRAQ 20040811 ptl-2004-03: WIDCOMM Bluetooth Connectivity Software Buffer Overflows MISC http://www.internetnews.com/security/article.php/3394181 MISC http://www.pentest.co.uk/documents/ptl-2004-03.html BUGTRAQ 20051204 have you ever been BluePIMped? XF bluetooth-btw-service-bo(16953) Buffer overflow in WIDCOMM Bluetooth Connectivity Software, as used in products such as BTStackServer 1.3.2.7 and 1.4.2.10, Windows XP and Windows 98 with MSI Bluetooth Dongles, and HP IPAQ 5450 running WinCE 3.0, allows remote attackers to execute arbitrary code via certain service requests.

cpe:/a:inter7:courier-imap:1.6 cpe:/a:inter7:courier-imap:1.7 cpe:/a:inter7:courier-imap:2.0.0 cpe:/a:inter7:courier-imap:2.1 cpe:/a:inter7:courier-imap:2.1.1 cpe:/a:inter7:courier-imap:2.1.2 cpe:/a:inter7:courier-imap:2.2.0 cpe:/a:inter7:courier-imap:2.2.1

CVE-2004-0777

2004-10-20T00:00:00.000-04:00

2017-07-10T21:30:27.917-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

GENTOO GLSA-200408-19 BID 10976 TRUSTIX 2004-0043 IDEFENSE 20040818 Courier-IMAP Remote Format String Vulnerability XF courierimap-authdebug-format-string(17034) Format string vulnerability in the auth_debug function in Courier-IMAP 1.6.0 through 2.2.1 and 3.x through 3.0.3, when login debugging (DEBUG_LOGIN) is enabled, allows remote attackers to execute arbitrary code.

cpe:/a:cvs:cvs:1.10.6 cpe:/a:cvs:cvs:1.10.7 cpe:/a:cvs:cvs:1.10.8 cpe:/a:cvs:cvs:1.11 cpe:/a:cvs:cvs:1.11.1 cpe:/a:cvs:cvs:1.11.1_p1 cpe:/a:cvs:cvs:1.11.2 cpe:/a:cvs:cvs:1.11.3 cpe:/a:cvs:cvs:1.11.4 cpe:/a:cvs:cvs:1.11.5 cpe:/a:cvs:cvs:1.11.6 cpe:/a:cvs:cvs:1.11.10 cpe:/a:cvs:cvs:1.11.11 cpe:/a:cvs:cvs:1.11.14 cpe:/a:cvs:cvs:1.11.15 cpe:/a:cvs:cvs:1.11.16 cpe:/a:cvs:cvs:1.12.1 cpe:/a:cvs:cvs:1.12.2 cpe:/a:cvs:cvs:1.12.5 cpe:/a:cvs:cvs:1.12.7 cpe:/a:cvs:cvs:1.12.8

CVE-2004-0778

2004-10-20T00:00:00.000-04:00

2017-10-10T21:29:33.310-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov IDEFENSE 20040816 CVS Undocumented Flag Information Disclosure Vulnerability CERT-VN VU#579225 MANDRAKE MDKSA-2004:108 BID 10955 XF cvs-history-info-disclosure(17001) CVS 1.11.x before 1.11.17, and 1.12.x before 1.12.9, allows remote attackers to determine the existence of arbitrary files and directories via the -X command for an alternate history file, which causes different error messages to be returned.

cpe:/a:firebirdsql:firebird:0.7 cpe:/a:mozilla:firefox:0.8 cpe:/a:mozilla:mozilla:1.6

CVE-2004-0779

2004-08-18T00:00:00.000-04:00

2017-07-10T21:30:28.043-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=226278 MANDRAKE MDKSA-2004:082 CONFIRM http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7 XF mozilla-plaintext-password(17018) The (1) Mozilla 1.6, (2) Firebird 0.7 and (3) Firefox 0.8 web browsers do not properly verify that cached passwords for SSL encrypted sites are only sent via SSL encrypted sessions to the site, which allows a remote attacker to cause a cached password to be sent in cleartext to a spoofed site.

cpe:/o:sun:solaris:8.0::x86 cpe:/o:sun:solaris:9.0::sparc cpe:/o:sun:solaris:9.0::x86 cpe:/o:sun:sunos:5.8

CVE-2004-0780

2004-12-31T00:00:00.000-05:00

2018-10-30T12:25:37.090-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1015455 SUNALERT 101933 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2006-056.htm IDEFENSE 20060110 Sun Solaris uustat Buffer Overflow Vulnerability BID 16193 VUPEN ADV-2006-0113 XF solaris-uustat-bo(24045) Buffer overflow in uustat in Sun Solaris 8 and 9 allows local users to execute arbitrary code via a long -S command line argument.

cpe:/a:icecast:icecast:1.3.0 cpe:/a:icecast:icecast:1.3.5 cpe:/a:icecast:icecast:1.3.5.1 cpe:/a:icecast:icecast:1.3.7 cpe:/a:icecast:icecast:1.3.7.1 cpe:/a:icecast:icecast:1.3.8 cpe:/a:icecast:icecast:1.3.9 cpe:/a:icecast:icecast:1.3.9.1 cpe:/a:icecast:icecast:1.3.9.2 cpe:/a:icecast:icecast:1.3.10 cpe:/a:icecast:icecast:1.3.10.1 cpe:/a:icecast:icecast:1.3.11 cpe:/a:icecast:icecast:1.3.12

CVE-2004-0781

2004-10-20T00:00:00.000-04:00

2017-07-10T21:30:28.153-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov DEBIAN DSA-541 BID 11021 XF icecast-list-useragent-xss(17086) Cross-site scripting (XSS) vulnerability in list.cgi in the Icecast internal web server (icecast-server) 1.3.12 and earlier allows remote attackers to inject arbitrary web script via the UserAgent parameter.

CVE-2004-0782

2004-10-20T00:00:00.000-04:00

2018-10-19T11:30:12.940-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONECTIVA CLA-2004:875 BUGTRAQ 20040915 CESA-2004-005: gtk+ XPM decoder MISC http://scary.beasts.org/security/CESA-2004-005.txt SUNALERT 101776 DEBIAN DSA-546 CERT-VN VU#729894 MANDRAKE MDKSA-2004:095 MANDRIVA MDKSA-2005:214 REDHAT RHSA-2004:447 REDHAT RHSA-2004:466 FEDORA FLSA-2005:155510 BID 11195 FEDORA FLSA:2005 XF gtk-xpm-pixbufcreatefromxpm-bo(17386) Integer overflow in pixbuf_create_from_xpm (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, allows remote attackers to execute arbitrary code via certain n_col and cpp values that enable a heap-based buffer overflow. NOTE: this identifier is ONLY for gtk+. It was incorrectly referenced in an advisory for a different issue (CVE-2004-0687).

CVE-2004-0783

2004-10-20T00:00:00.000-04:00

2018-10-19T11:30:14.283-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONECTIVA CLA-2004:875 BUGTRAQ 20040915 CESA-2004-005: gtk+ XPM decoder MISC http://scary.beasts.org/security/CESA-2004-005.txt SUNALERT 101776 CERT-VN VU#369358 MANDRAKE MDKSA-2004:095 MANDRAKE MDKSA-2004:096 MANDRIVA MDKSA-2005:214 REDHAT RHSA-2004:447 REDHAT RHSA-2004:466 FEDORA FLSA-2005:155510 BID 11195 FEDORA FLSA:2005 XF gtk-xpm-xpmextractcolor-bo(17385) Stack-based buffer overflow in xpm_extract_color (io-xpm.c) in the XPM image decoder for gtk+ 2.4.4 (gtk2) and earlier, and gdk-pixbuf before 0.22, may allow remote attackers to execute arbitrary code via a certain color string. NOTE: this identifier is ONLY for gtk+. It was incorrectly referenced in an advisory for a different issue (CVE-2004-0688).

CVE-2004-0784

2004-10-20T00:00:00.000-04:00

2017-10-10T21:29:33.590-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://gaim.sourceforge.net/security/?id=1 FEDORA FEDORA-2004-278 FEDORA FEDORA-2004-279 GENTOO GLSA-200408-27 REDHAT RHSA-2004:400 XF gaim-smiley-command-execution(17144) The smiley theme functionality in Gaim before 0.82 allows remote attackers to execute arbitrary commands via shell metacharacters in the filename of the tar file that is dragged to the smiley selector.

CVE-2004-0785

2004-10-20T00:00:00.000-04:00

2017-10-10T21:29:33.667-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://gaim.sourceforge.net/security/?id=3 CONFIRM http://gaim.sourceforge.net/security/?id=4 CONFIRM http://gaim.sourceforge.net/security/?id=5 SECTRACK 1011083 FEDORA FEDORA-2004-278 FEDORA FEDORA-2004-279 GENTOO GLSA-200408-27 REDHAT RHSA-2004:400 BID 11056 XF gaim-rtf-bo(17141) XF gaim-hostname-bo(17142) XF gaim-url-bo(17143) Multiple buffer overflows in Gaim before 0.82 allow remote attackers to cause a denial of service and possibly execute arbitrary code via (1) Rich Text Format (RTF) messages, (2) a long hostname for the local system as obtained from DNS, or (3) a long URL that is not properly handled by the URL decoder.

CVE-2004-0786

2004-10-20T00:00:00.000-04:00

2017-10-10T21:29:33.747-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov GENTOO GLSA-200409-21 MANDRAKE MDKSA-2004:096 SUSE SUSE-SA:2004:032 REDHAT RHSA-2004:463 TRUSTIX 2004-0047 XF apache-ipv6-aprutil-dos(17382) MLIST [httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html MLIST [httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html The IPv6 URI parsing routines in the apr-util library for Apache 2.0.50 and earlier allow remote attackers to cause a denial of service (child process crash) via a certain URI, as demonstrated using the Codenomicon HTTP Test Tool.

cpe:/a:openca:openca:0.8.0 cpe:/a:openca:openca:0.8.1 cpe:/a:openca:openca:0.8.6 cpe:/a:openca:openca:0.9.0 cpe:/a:openca:openca:0.9.0.1 cpe:/a:openca:openca:0.9.0.2 cpe:/a:openca:openca:0.9.1 cpe:/a:openca:openca:0.9.1.2 cpe:/a:openca:openca:0.9.1.3 cpe:/a:openca:openca:0.9.1.4 cpe:/a:openca:openca:0.9.1.5 cpe:/a:openca:openca:0.9.1.6 cpe:/a:openca:openca:0.9.1.7 cpe:/a:openca:openca:0.9.1.8 cpe:/a:openca:openca:0.9.2_rc6

CVE-2004-0787

2004-10-20T00:00:00.000-04:00

2017-07-10T21:30:28.543-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040906 OpenCA Security Advisory: Cross Site Scripting vulnerability CONFIRM http://www.openca.org/news/CAN-2004-0787.txt BID 11113 XF openca-frontend-xss(17274) Cross-site scripting (XSS) vulnerability in the web frontend in OpenCA 0.9.1-8 and earlier, and 0.9.2 RC6 and earlier, allows remote attackers to inject arbitrary web script or HTML via the form input fields.

CVE-2004-0788

2004-10-20T00:00:00.000-04:00

2018-10-19T11:30:15.677-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2004:875 DEBIAN DSA-546 CERT-VN VU#577654 MANDRAKE MDKSA-2004:095 MANDRIVA MDKSA-2005:214 REDHAT RHSA-2004:447 REDHAT RHSA-2004:466 FEDORA FLSA-2005:155510 BID 11195 FEDORA FLSA:2005 XF gtk-ico-integer-bo(17387) Integer overflow in the ICO image decoder for (1) gdk-pixbuf before 0.22 and (2) gtk2 before 2.2.4 allows remote attackers to cause a denial of service (application crash) via a crafted ICO file.

cpe:/a:delegate:delegate:7.7.0 cpe:/a:delegate:delegate:7.7.1 cpe:/a:delegate:delegate:7.8.0 cpe:/a:delegate:delegate:7.8.1 cpe:/a:delegate:delegate:7.8.2 cpe:/a:delegate:delegate:7.9.11 cpe:/a:delegate:delegate:8.3.3 cpe:/a:delegate:delegate:8.3.4 cpe:/a:delegate:delegate:8.4.0 cpe:/a:delegate:delegate:8.5.0 cpe:/a:delegate:delegate:8.9 cpe:/a:delegate:delegate:8.9.1 cpe:/a:delegate:delegate:8.9.2 cpe:/a:delegate:delegate:8.9.3 cpe:/a:delegate:delegate:8.9.4 cpe:/a:delegate:delegate:8.9.5 cpe:/a:dnrd:dnrd:1.0 cpe:/a:dnrd:dnrd:1.1 cpe:/a:dnrd:dnrd:1.2 cpe:/a:dnrd:dnrd:1.3 cpe:/a:dnrd:dnrd:1.4 cpe:/a:dnrd:dnrd:2.0 cpe:/a:dnrd:dnrd:2.1 cpe:/a:dnrd:dnrd:2.2 cpe:/a:dnrd:dnrd:2.3 cpe:/a:dnrd:dnrd:2.4 cpe:/a:dnrd:dnrd:2.5 cpe:/a:dnrd:dnrd:2.6 cpe:/a:dnrd:dnrd:2.7 cpe:/a:dnrd:dnrd:2.8 cpe:/a:dnrd:dnrd:2.9 cpe:/a:dnrd:dnrd:2.10 cpe:/a:don_moore:mydns:0.6 cpe:/a:don_moore:mydns:0.7 cpe:/a:don_moore:mydns:0.8 cpe:/a:don_moore:mydns:0.9 cpe:/a:don_moore:mydns:0.10.0 cpe:/a:maradns:maradns:0.5.28 cpe:/a:maradns:maradns:0.5.29 cpe:/a:maradns:maradns:0.5.30 cpe:/a:maradns:maradns:0.5.31 cpe:/a:maradns:maradns:0.8.05 cpe:/a:pliant:pliant_dns_server cpe:/a:posadis:posadis:0.50.4 cpe:/a:posadis:posadis:0.50.5 cpe:/a:posadis:posadis:0.50.6 cpe:/a:posadis:posadis:0.50.7 cpe:/a:posadis:posadis:0.50.8 cpe:/a:posadis:posadis:0.50.9 cpe:/a:posadis:posadis:0.60.0 cpe:/a:posadis:posadis:0.60.1 cpe:/a:posadis:posadis:m5pre1 cpe:/a:posadis:posadis:m5pre2 cpe:/a:qbik:wingate:3.0 cpe:/a:qbik:wingate:4.0.1 cpe:/a:qbik:wingate:4.1_beta_a cpe:/a:qbik:wingate:6.0 cpe:/a:qbik:wingate:6.0.1_build_993 cpe:/a:qbik:wingate:6.0.1_build_995 cpe:/a:team_johnlong:raidendnsd cpe:/h:axis:2100_network_camera:2.0 cpe:/h:axis:2100_network_camera:2.01 cpe:/h:axis:2100_network_camera:2.02 cpe:/h:axis:2100_network_camera:2.03 cpe:/h:axis:2100_network_camera:2.12 cpe:/h:axis:2100_network_camera:2.30 cpe:/h:axis:2100_network_camera:2.31 cpe:/h:axis:2100_network_camera:2.32 cpe:/h:axis:2100_network_camera:2.33 cpe:/h:axis:2100_network_camera:2.34 cpe:/h:axis:2100_network_camera:2.40 cpe:/h:axis:2100_network_camera:2.41 cpe:/h:axis:2110_network_camera:2.12 cpe:/h:axis:2110_network_camera:2.30 cpe:/h:axis:2110_network_camera:2.31 cpe:/h:axis:2110_network_camera:2.32 cpe:/h:axis:2110_network_camera:2.34 cpe:/h:axis:2110_network_camera:2.40 cpe:/h:axis:2110_network_camera:2.41 cpe:/h:axis:2120_network_camera:2.12 cpe:/h:axis:2120_network_camera:2.30 cpe:/h:axis:2120_network_camera:2.31 cpe:/h:axis:2120_network_camera:2.32 cpe:/h:axis:2120_network_camera:2.34 cpe:/h:axis:2120_network_camera:2.40 cpe:/h:axis:2120_network_camera:2.41 cpe:/h:axis:2400_video_server:3.11 cpe:/h:axis:2400_video_server:3.12 cpe:/h:axis:2401_video_server:3.12 cpe:/h:axis:2420_network_camera:2.12 cpe:/h:axis:2420_network_camera:2.30 cpe:/h:axis:2420_network_camera:2.31 cpe:/h:axis:2420_network_camera:2.32 cpe:/h:axis:2420_network_camera:2.33 cpe:/h:axis:2420_network_camera:2.34 cpe:/h:axis:2420_network_camera:2.40 cpe:/h:axis:2420_network_camera:2.41 cpe:/h:axis:2460_network_dvr:3.12

CVE-2004-0789

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:28.667-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SECTRACK 1012157 MISC http://www.niscc.gov.uk/niscc/docs/al-20041130-00862.html?lang=en MISC http://www.niscc.gov.uk/niscc/docs/re-20041109-00957.pdf CONFIRM http://www.posadis.org/advisories/pos_adv_006.txt BID 11642 XF dns-localhost-dos(17997) Multiple implementations of the DNS protocol, including (1) Poslib 1.0.2-1 and earlier as used by Posadis, (2) Axis Network products before firmware 3.13, and (3) Men & Mice Suite 2.2x before 2.2.3 and 3.5.x before 3.5.2, allow remote attackers to cause a denial of service (CPU and network bandwidth consumption) by triggering a communications loop via (a) DNS query packets with localhost as a spoofed source address, or (b) a response packet that triggers a response packet.

cpe:/o:microsoft:windows_2000::sp3 cpe:/o:microsoft:windows_2000::sp4::fr cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_98se cpe:/o:microsoft:windows_me cpe:/o:microsoft:windows_xp:::64-bit cpe:/o:microsoft:windows_xp::sp1:64-bit cpe:/o:microsoft:windows_xp::sp1:tablet_pc cpe:/o:microsoft:windows_xp::sp2:tablet_pc cpe:/o:sun:solaris:9.0::sparc cpe:/o:sun:solaris:10.0::sparc cpe:/o:sun:sunos:5.7 cpe:/o:sun:sunos:5.8

CVE-2004-0790

2005-04-12T00:00:00.000-04:00

2018-10-30T12:26:22.763-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SCO SCOSA-2006.4 HP SSRT4743 SREASON 19 SREASON 57 SUNALERT 101658 SUNALERT 57746 MISC http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html HP HPSBUX01164 HP SSRT061264 BID 13124 MISC http://www.uniras.gov.uk/niscc/docs/al-20050412-00308.html?lang=en VUPEN ADV-2006-3983 MISC http://www.watersprings.org/pub/id/draft-gont-tcpm-icmp-attacks-03.txt MS MS05-019 MS MS06-064 Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the "blind connection-reset attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.

cpe:/o:sun:solaris:9.0::sparc cpe:/o:sun:solaris:10.0::sparc cpe:/o:sun:sunos:5.7 cpe:/o:sun:sunos:5.8

CVE-2004-0791

2005-04-12T00:00:00.000-04:00

2018-10-30T12:26:22.763-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SCO SCOSA-2006.4 HP SSRT4743 SREASON 19 SREASON 57 SUNALERT 101658 SUNALERT 57746 MISC http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html REDHAT RHSA-2005:016 REDHAT RHSA-2005:017 REDHAT RHSA-2005:043 HP HPSBUX01164 FEDORA FLSA:157459-1 FEDORA FLSA:157459-2 BID 13124 MISC http://www.uniras.gov.uk/niscc/docs/al-20050412-00308.html?lang=en MISC http://www.watersprings.org/pub/id/draft-gont-tcpm-icmp-attacks-03.txt Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via a blind throughput-reduction attack using spoofed Source Quench packets, aka the "ICMP Source Quench attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.

cpe:/a:andrew_tridgell:rsync:2.3.1 cpe:/a:andrew_tridgell:rsync:2.3.2 cpe:/a:andrew_tridgell:rsync:2.3.2_1.2::alpha cpe:/a:andrew_tridgell:rsync:2.3.2_1.2::arm cpe:/a:andrew_tridgell:rsync:2.3.2_1.2::intel cpe:/a:andrew_tridgell:rsync:2.3.2_1.2::m68k cpe:/a:andrew_tridgell:rsync:2.3.2_1.2::ppc cpe:/a:andrew_tridgell:rsync:2.3.2_1.2::sparc cpe:/a:andrew_tridgell:rsync:2.3.2_1.3 cpe:/a:andrew_tridgell:rsync:2.4.0 cpe:/a:andrew_tridgell:rsync:2.4.1 cpe:/a:andrew_tridgell:rsync:2.4.3 cpe:/a:andrew_tridgell:rsync:2.4.4 cpe:/a:andrew_tridgell:rsync:2.4.5 cpe:/a:andrew_tridgell:rsync:2.4.6 cpe:/a:andrew_tridgell:rsync:2.4.8 cpe:/a:andrew_tridgell:rsync:2.5.0 cpe:/a:andrew_tridgell:rsync:2.5.1 cpe:/a:andrew_tridgell:rsync:2.5.2 cpe:/a:andrew_tridgell:rsync:2.5.3 cpe:/a:andrew_tridgell:rsync:2.5.4 cpe:/a:andrew_tridgell:rsync:2.5.5 cpe:/a:andrew_tridgell:rsync:2.5.6 cpe:/a:andrew_tridgell:rsync:2.5.7 cpe:/a:andrew_tridgell:rsync:2.6 cpe:/a:andrew_tridgell:rsync:2.6.1 cpe:/a:andrew_tridgell:rsync:2.6.2

CVE-2004-0792

2004-10-20T00:00:00.000-04:00

2017-10-10T21:29:34.107-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040816 TSSA-2004-020-ES - rsync BUGTRAQ 20040817 LNSA-#2004-0017: rsync (Aug, 17 2004) CONFIRM http://samba.org/rsync/#security_aug04 DEBIAN DSA-538 GENTOO GLSA-200408-17 MANDRAKE MDKSA-2004:083 SUSE SUSE-SA:2004:026 TRUSTIX 2004-0042 Directory traversal vulnerability in the sanitize_path function in util.c for rsync 2.6.2 and earlier, when chroot is disabled, allows attackers to read or write certain files.

cpe:/a:debian:bsdmainutils:6.0 cpe:/a:debian:bsdmainutils:6.0.1 cpe:/a:debian:bsdmainutils:6.0.2 cpe:/a:debian:bsdmainutils:6.0.3 cpe:/a:debian:bsdmainutils:6.0.4 cpe:/a:debian:bsdmainutils:6.0.5 cpe:/a:debian:bsdmainutils:6.0.6 cpe:/a:debian:bsdmainutils:6.0.7 cpe:/a:debian:bsdmainutils:6.0.8 cpe:/a:debian:bsdmainutils:6.0.9 cpe:/a:debian:bsdmainutils:6.0.10 cpe:/a:debian:bsdmainutils:6.0.11 cpe:/a:debian:bsdmainutils:6.0.12 cpe:/a:debian:bsdmainutils:6.0.13 cpe:/a:debian:bsdmainutils:6.0.14

CVE-2004-0793

2004-10-20T00:00:00.000-04:00

2017-07-10T21:30:28.730-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040830 Possible root compromose with bsdmainutils 6.0.x < 6.0.15 (Debian testing/unstable) BID 11077 XF bsdmainutils-calendar-gain-privileges(17162) The calendar program in bsdmainutils 6.0 through 6.0.14 does not drop root privileges when executed with the -a flag, which allows attackers to execute arbitrary commands via a calendar event file.

cpe:/a:luke_mewburn:lukemftp:1.1 cpe:/a:luke_mewburn:lukemftp:1.5 cpe:/a:luke_mewburn:tnftpd:2003-12-17

CVE-2004-0794

2004-10-20T00:00:00.000-04:00

2017-07-10T21:30:28.777-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

NETBSD NetBSD-SA2004-009 FULLDISC 20040817 Multiple remote vulnerabilities in lukemftpd aka. tnftpd DEBIAN DSA-551 CONFIRM http://www.vuxml.org/freebsd/c4b025bb-f05d-11d8-9837-000c41e2cdad.html XF tnftpd-gain-access(17020) Multiple signal handler race conditions in lukemftpd (aka tnftpd before 20040810) allow remote authenticated attackers to cause a denial of service or execute arbitrary code.

cpe:/a:ibm:db2_universal_database:8.1::aix

CVE-2004-0795

2004-10-20T00:00:00.000-04:00

2017-07-10T21:30:28.840-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040309 IBM DB2 Remote Command Execution Privilege Upgrade (#NISR09032004) MISC http://www.nextgenss.com/advisories/db2rmtcmd.txt BID 9821 AIXAPAR IY53894 XF db2-rcs-gain-privileges(15420) DB2 8.1 remote command server (DB2RCMD.EXE) executes the db2rcmdc.exe program as the db2admin administrator, which allows local users to gain privileges via the DB2REMOTECMD named pipe.

cpe:/a:spamassassin:spamassassin:2.40 cpe:/a:spamassassin:spamassassin:2.41 cpe:/a:spamassassin:spamassassin:2.42 cpe:/a:spamassassin:spamassassin:2.43 cpe:/a:spamassassin:spamassassin:2.44 cpe:/a:spamassassin:spamassassin:2.50 cpe:/a:spamassassin:spamassassin:2.55 cpe:/a:spamassassin:spamassassin:2.60 cpe:/a:spamassassin:spamassassin:2.63

CVE-2004-0796

2004-10-20T00:00:00.000-04:00

2017-10-10T21:29:34.183-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=129337 MLIST [spamassassin-announce] 20040805 [SA-Announce] SpamAssassin 2.64 is released! GENTOO GLSA-200408-06 MANDRAKE MDKSA-2004:084 BID 10957 FEDORA FLSA:2268 XF spamassassin-dos(16938) SpamAssassin 2.5x, and 2.6x before 2.64, allows remote attackers to cause a denial of service via certain malformed messages.

cpe:/a:gnu:zlib:1.2.1

CVE-2004-0797

2004-10-20T00:00:00.000-04:00

2017-07-10T21:30:28.950-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov SCO SCOSA-2006.6 SCO SCOSA-2004.17 CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=252253 CONECTIVA CLA-2004:865 CONECTIVA CLA-2004:878 BUGTRAQ 20040825 [OpenPKG-SA-2004.038] OpenPKG Security Advisory (zlib) GENTOO GLSA-200408-26 SECTRACK 1011085 CERT-VN VU#238678 MANDRAKE MDKSA-2004:090 SUSE SUSE-SA:2004:029 BID 11051 SLACKWARE SSA:2004-278 FEDORA FLSA:2043 XF zlib-inflate-inflateback-dos(17119) The error handling in the (1) inflate and (2) inflateBack functions in ZLib compression library 1.2.x allows local users to cause a denial of service (application crash).

cpe:/a:ipswitch:whatsup_gold:7.0 cpe:/a:ipswitch:whatsup_gold:7.03 cpe:/a:ipswitch:whatsup_gold:7.04 cpe:/a:ipswitch:whatsup_gold:8.0 cpe:/a:ipswitch:whatsup_gold:8.01 cpe:/a:ipswitch:whatsup_gold:8.03

CVE-2004-0798

2004-10-20T00:00:00.000-04:00

2017-10-04T21:29:00.540-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

IDEFENSE 20040825 Ipswitch WhatsUp Gold Remote Buffer Overflow Vulnerability MISC http://www.ipswitch.com/Support/WhatsUp/patch-upgrades.html BID 11043 XF whatsup-maincfgret-bo(17111) EXPLOIT-DB 566 Buffer overflow in the _maincfgret.cgi script for Ipswitch WhatsUp Gold before 8.03 Hotfix 1 allows remote attackers to execute arbitrary code via a long instancename parameter.

CVE-2004-0799

2004-10-20T00:00:00.000-04:00

2017-07-10T21:30:29.057-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov IDEFENSE 20040916 Ipswitch WhatsUp Gold Remote Denial of Service Vulnerability CONFIRM http://www.ipswitch.com/Support/WhatsUp/patch-upgrades.html XF whatsup-get-prn-dos(17418) The HTTP daemon in Ipswitch WhatsUp Gold 8.03 and 8.03 Hotfix 1 allows remote attackers to cause a denial of service (server crash) via a GET request containing an MS-DOS device name, as demonstrated using "prn.htm".

cpe:/a:avaya:call_management_system_server:9.0 cpe:/a:avaya:call_management_system_server:11.0 cpe:/a:avaya:call_management_system_server:12.0 cpe:/a:sun:dtmail cpe:/o:sun:solaris:8.0::x86 cpe:/o:sun:solaris:9.0::sparc cpe:/o:sun:solaris:9.0::x86 cpe:/o:sun:sunos:5.8

CVE-2004-0800

2004-08-24T00:00:00.000-04:00

2018-10-30T12:25:37.090-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CIAC O-202 IDEFENSE 20040824 CDE Mailer argv[0] Format String Vulnerability CERT-VN VU#928598 BID 11027 XF dtmail-argv-format-string(17095) Format string vulnerability in CDE Mailer (dtmail) on Solaris 8 and 9 allows local users to gain privileges via format strings in the argv[0] value.

cpe:/a:linuxprinting.org:foomatic-filters:3.0 cpe:/a:linuxprinting.org:foomatic-filters:3.0.1 cpe:/a:linuxprinting.org:foomatic-filters:3.0.2 cpe:/a:linuxprinting.org:foomatic-filters:3.1 cpe:/a:sun:java_desktop_system:2.0 cpe:/a:sun:java_desktop_system:2003 cpe:/o:conectiva:linux:9.0 cpe:/o:conectiva:linux:10.0 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1

CVE-2004-0801

2004-09-16T00:00:00.000-04:00

2017-07-10T21:30:29.183-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SCO SCOSA-2005.12 CONECTIVA CLA-2004:880 SUSE SUSE-SA:2006:026 SUNALERT 201005 SUNALERT 1000757 SUSE SUSE-SA:2004:031 BID 11184 TRUSTIX 2004-0047 XF foomatic-command-execution(17388) Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands.

cpe:/a:enlightenment:imlib:1.9 cpe:/a:enlightenment:imlib:1.9.1 cpe:/a:enlightenment:imlib:1.9.2 cpe:/a:enlightenment:imlib:1.9.3 cpe:/a:enlightenment:imlib:1.9.4 cpe:/a:enlightenment:imlib:1.9.5 cpe:/a:enlightenment:imlib:1.9.6 cpe:/a:enlightenment:imlib:1.9.7 cpe:/a:enlightenment:imlib:1.9.8 cpe:/a:enlightenment:imlib:1.9.9 cpe:/a:enlightenment:imlib:1.9.10 cpe:/a:enlightenment:imlib:1.9.11 cpe:/a:enlightenment:imlib:1.9.12 cpe:/a:enlightenment:imlib:1.9.13 cpe:/a:enlightenment:imlib:1.9.14 cpe:/a:enlightenment:imlib2:1.0 cpe:/a:enlightenment:imlib2:1.0.1 cpe:/a:enlightenment:imlib2:1.0.2 cpe:/a:enlightenment:imlib2:1.0.3 cpe:/a:enlightenment:imlib2:1.0.4 cpe:/a:enlightenment:imlib2:1.0.5 cpe:/a:enlightenment:imlib2:1.1 cpe:/a:enlightenment:imlib2:1.1.1 cpe:/a:imagemagick:imagemagick:5.3.3 cpe:/a:imagemagick:imagemagick:5.4.3 cpe:/a:imagemagick:imagemagick:5.4.4.5 cpe:/a:imagemagick:imagemagick:5.4.7 cpe:/a:imagemagick:imagemagick:5.4.8 cpe:/a:imagemagick:imagemagick:5.4.8.2.1.1.0 cpe:/a:imagemagick:imagemagick:5.5.3.2.1.2.0 cpe:/a:imagemagick:imagemagick:5.5.6.0_2003-04-09 cpe:/a:imagemagick:imagemagick:5.5.7 cpe:/a:imagemagick:imagemagick:6.0.2 cpe:/a:sun:java_desktop_system:2.0 cpe:/a:sun:java_desktop_system:2003 cpe:/o:conectiva:linux:9.0 cpe:/o:conectiva:linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:9.2::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1::x86_64 cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::advanced_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:2.1::workstation_ia64 cpe:/o:redhat:enterprise_linux:3.0::advanced_servers cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:fedora_core:core_1.0 cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:redhat:fedora_core:core_3.0 cpe:/o:redhat:linux_advanced_workstation:2.1::ia64 cpe:/o:redhat:linux_advanced_workstation:2.1::itanium_processor cpe:/o:suse:suse_linux:8.0 cpe:/o:suse:suse_linux:8.0::i386 cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.2 cpe:/o:turbolinux:turbolinux_desktop:10.0 cpe:/o:turbolinux:turbolinux_server:7.0 cpe:/o:turbolinux:turbolinux_server:8.0 cpe:/o:turbolinux:turbolinux_workstation:7.0 cpe:/o:turbolinux:turbolinux_workstation:8.0 cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc

CVE-2004-0802

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:29.277-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

MISC http://cvs.sourceforge.net/viewcvs.py/enlightenment/e17/libs/imlib2/ChangeLog?rev=1.20&view=markup CONECTIVA CLA-2004:870 SUNALERT 201611 GENTOO GLSA-200409-12 BID 11084 CONFIRM http://www.vuxml.org/freebsd/ba005226-fb5b-11d8-9837-000c41e2cdad.html XF imlib2-bmp-bo(17183) Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817.

cpe:/a:libtiff:libtiff:3.4 cpe:/a:libtiff:libtiff:3.5.1 cpe:/a:libtiff:libtiff:3.5.2 cpe:/a:libtiff:libtiff:3.5.3 cpe:/a:libtiff:libtiff:3.5.4 cpe:/a:libtiff:libtiff:3.5.5 cpe:/a:libtiff:libtiff:3.5.7 cpe:/a:libtiff:libtiff:3.6.0 cpe:/a:libtiff:libtiff:3.6.1 cpe:/a:pdflib:pdf_library:5.0.2 cpe:/a:wxgtk2:wxgtk2:2.5_.0 cpe:/o:apple:mac_os_x:10.2 cpe:/o:apple:mac_os_x:10.2.1 cpe:/o:apple:mac_os_x:10.2.2 cpe:/o:apple:mac_os_x:10.2.3 cpe:/o:apple:mac_os_x:10.2.4 cpe:/o:apple:mac_os_x:10.2.5 cpe:/o:apple:mac_os_x:10.2.6 cpe:/o:apple:mac_os_x:10.2.7 cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3 cpe:/o:apple:mac_os_x:10.3.1 cpe:/o:apple:mac_os_x:10.3.2 cpe:/o:apple:mac_os_x:10.3.3 cpe:/o:apple:mac_os_x:10.3.4 cpe:/o:apple:mac_os_x:10.3.5 cpe:/o:apple:mac_os_x:10.3.6 cpe:/o:apple:mac_os_x_server:10.2 cpe:/o:apple:mac_os_x_server:10.2.1 cpe:/o:apple:mac_os_x_server:10.2.2 cpe:/o:apple:mac_os_x_server:10.2.3 cpe:/o:apple:mac_os_x_server:10.2.4 cpe:/o:apple:mac_os_x_server:10.2.5 cpe:/o:apple:mac_os_x_server:10.2.6 cpe:/o:apple:mac_os_x_server:10.2.7 cpe:/o:apple:mac_os_x_server:10.2.8 cpe:/o:apple:mac_os_x_server:10.3 cpe:/o:apple:mac_os_x_server:10.3.1 cpe:/o:apple:mac_os_x_server:10.3.2 cpe:/o:apple:mac_os_x_server:10.3.3 cpe:/o:apple:mac_os_x_server:10.3.4 cpe:/o:apple:mac_os_x_server:10.3.5 cpe:/o:apple:mac_os_x_server:10.3.6 cpe:/o:kde:kde:3.2 cpe:/o:kde:kde:3.2.1 cpe:/o:kde:kde:3.2.2 cpe:/o:kde:kde:3.2.3 cpe:/o:kde:kde:3.3 cpe:/o:kde:kde:3.3.1 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::advanced_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:2.1::workstation_ia64 cpe:/o:redhat:enterprise_linux:3.0::advanced_servers cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:redhat:linux_advanced_workstation:2.1::ia64 cpe:/o:redhat:linux_advanced_workstation:2.1::itanium_processor cpe:/o:suse:suse_linux:1.0::desktop cpe:/o:suse:suse_linux:8::enterprise_server cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::enterprise_server cpe:/o:suse:suse_linux:9.1 cpe:/o:trustix:secure_linux:1.5 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1

CVE-2004-0803

2004-12-23T00:00:00.000-05:00

2017-10-10T21:29:34.373-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONECTIVA CLA-2004:888 BUGTRAQ 20041013 CESA-2004-006: libtiff MISC http://scary.beasts.org/security/CESA-2004-006.txt SUNALERT 101677 SUNALERT 201072 DEBIAN DSA-567 GENTOO GLSA-200410-11 CERT-VN VU#948752 CONFIRM http://www.kde.org/info/security/advisory-20041209-2.txt MANDRAKE MDKSA-2004:109 MANDRAKE MDKSA-2005:052 SUSE SUSE-SA:2004:038 REDHAT RHSA-2004:577 REDHAT RHSA-2005:021 REDHAT RHSA-2005:354 BID 11406 XF libtiff-library-decoding-bo(17703) Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer overflows, allow remote attackers to execute arbitrary code via TIFF files.

cpe:/a:libtiff:libtiff

CVE-2004-0804

2004-11-03T00:00:00.000-05:00

2017-10-10T21:29:34.450-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://bugzilla.remotesensing.org/show_bug.cgi?id=111 CONECTIVA CLA-2004:888 SUNALERT 101677 SUNALERT 201072 DEBIAN DSA-567 CERT-VN VU#555304 CONFIRM http://www.kde.org/info/security/advisory-20041209-2.txt MANDRAKE MDKSA-2004:109 MANDRAKE MDKSA-2005:052 SUSE SUSE-SA:2004:038 REDHAT RHSA-2004:577 REDHAT RHSA-2005:021 REDHAT RHSA-2005:354 XF libtiff-dos(17755) Vulnerability in tif_dirread.c for libtiff allows remote attackers to cause a denial of service (application crash) via a TIFF image that causes a divide-by-zero error when the number of row bytes is zero, a different vulnerability than CVE-2005-2452.

cpe:/a:mpg123:mpg123:0.59r cpe:/a:mpg123:mpg123:0.59s cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:9.2::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1::x86_64

CVE-2004-0805

2004-12-23T00:00:00.000-05:00

2017-07-10T21:30:29.480-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

FULLDISC 20040907 mpg123 buffer overflow vulnerability MISC http://www.alighieri.org/advisories/advisory-mpg123.txt DEBIAN DSA-564 GENTOO GLSA-200409-20 MANDRAKE MDKSA-2004:100 BUGTRAQ 20040916 mpg123 buffer overflow vulnerability BID 11121 XF mpg123-layer2c-bo(17287) Buffer overflow in layer2.c in mpg123 0.59r and possibly mpg123 0.59s allows remote attackers to execute arbitrary code via a certain (1) mp3 or (2) mp2 file.

cpe:/a:cdrtools:cdrecord:1.11 cpe:/a:cdrtools:cdrecord:2.0

CVE-2004-0806

2004-12-31T00:00:00.000-05:00

2017-10-10T21:29:34.527-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SGI 20060401-01-U BUGTRAQ 20040909 Bugtraq: cdrecord local root exploit SECTRACK 1011091 BUGTRAQ 20040910 CAU-EX-2004-0002: cdrecord-suidshell.sh CERT-VN VU#700326 MANDRAKE MDKSA-2004:091 BID 11075 FEDORA FLSA:2058 XF cdrecord-rsh-gain-privileges(17303) cdrecord in the cdrtools package before 2.01, when installed setuid root, does not properly drop privileges before executing a program specified in the RSH environment variable, which allows local users to gain privileges.

cpe:/a:samba:samba:3.0.0 cpe:/a:samba:samba:3.0.1 cpe:/a:samba:samba:3.0.2 cpe:/a:samba:samba:3.0.2a cpe:/a:samba:samba:3.0.3 cpe:/a:samba:samba:3.0.4 cpe:/a:samba:samba:3.0.4:rc1 cpe:/a:samba:samba:3.0.5 cpe:/a:samba:samba:3.0.6 cpe:/a:sgi:samba:3.0::irix cpe:/a:sgi:samba:3.0.1::irix cpe:/a:sgi:samba:3.0.2::irix cpe:/a:sgi:samba:3.0.3::irix cpe:/a:sgi:samba:3.0.4::irix cpe:/a:sgi:samba:3.0.5::irix cpe:/a:sgi:samba:3.0.6::irix cpe:/o:conectiva:linux:9.0 cpe:/o:conectiva:linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:suse:suse_linux:8::enterprise_server cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::enterprise_server cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1

CVE-2004-0807

2004-09-13T00:00:00.000-04:00

2017-10-10T21:29:34.590-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2004:873 BUGTRAQ 20040913 Samba 3.0 DoS Vulberabilities (CAN-2004-0807 & CAN-2004-0808) BUGTRAQ 20040915 [OpenPKG-SA-2004.040] OpenPKG Security Advisory (samba) GENTOO GLSA-200409-16 IDEFENSE 20040913 Samba 3.x SMBD Remote Denial of Service Vulnerability REDHAT RHSA-2004:467 TRUSTIX 2004-0046 Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an infinite loop.

CVE-2004-0808

2004-12-31T00:00:00.000-05:00

2018-10-30T12:25:11.107-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2004:873 BUGTRAQ 20040913 Samba 3.0 DoS Vulberabilities (CAN-2004-0807 & CAN-2004-0808) BUGTRAQ 20040915 [OpenPKG-SA-2004.040] OpenPKG Security Advisory (samba) GENTOO GLSA-200409-16 IDEFENSE 20040913 Samba nmbd Invalid Length Denial of Service Vulnerability REDHAT RHSA-2004:467 TRUSTIX 2004-0046 The process_logon_packet function in the nmbd server for Samba 3.0.6 and earlier, when domain logons are enabled, allows remote attackers to cause a denial of service via a SAM_UAS_CHANGE request with a length value that is larger than the number of structures that are provided.

cpe:/a:apache:http_server:2.0.47 cpe:/a:apache:http_server:2.0.50 cpe:/a:hp:secure_web_server_for_tru64:4.0_f cpe:/a:hp:secure_web_server_for_tru64:4.0_g cpe:/a:hp:secure_web_server_for_tru64:5.0_a cpe:/a:hp:secure_web_server_for_tru64:5.1 cpe:/a:hp:secure_web_server_for_tru64:5.1_a cpe:/a:hp:secure_web_server_for_tru64:5.8.1 cpe:/a:hp:secure_web_server_for_tru64:5.8.2 cpe:/a:hp:secure_web_server_for_tru64:5.9.1 cpe:/a:hp:secure_web_server_for_tru64:5.9.2 cpe:/a:hp:secure_web_server_for_tru64:6.3.0 cpe:/o:conectiva:linux:9.0 cpe:/o:conectiva:linux:10.0 cpe:/o:gentoo:linux:1.4 cpe:/o:hp:hp-ux:11.00 cpe:/o:hp:hp-ux:11.11 cpe:/o:hp:hp-ux:11.22 cpe:/o:hp:hp-ux:11.23::ia64_64-bit cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:9.2::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1 cpe:/o:turbolinux:turbolinux_desktop:10.0 cpe:/o:turbolinux:turbolinux_home cpe:/o:turbolinux:turbolinux_server:10.0

CVE-2004-0809

2004-09-16T00:00:00.000-04:00

2017-10-10T21:29:34.730-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/dav/fs/lock.c?r1=1.32&r2=1.33 DEBIAN DSA-558 GENTOO GLSA-200409-21 REDHAT RHSA-2004:463 TRUSTIX 2004-0047 XF apache-moddav-lock-dos(17366) MLIST [httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html MLIST [httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html The mod_dav module in Apache 2.0.50 and earlier allows remote attackers to cause a denial of service (child process crash) via a certain sequence of LOCK requests for a location that allows WebDAV authoring access.

cpe:/a:netopia:timbuktu_pro_mac:6.0.1

CVE-2004-0810

2004-12-23T00:00:00.000-05:00

2017-07-10T21:30:29.667-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20041119 Corsaire Security Advisory - Netopia Timbuktu remote buffer overflow issue MISC http://www.corsaire.com/advisories/c040720-001.txt BID 11714 MISC http://www.uniras.gov.uk/vuls/2004/190204/index.htm XF timbuktu-multiple-connections-dos(18172) Buffer overflow in Netopia Timbuktu 7.0.3 allows remote attackers to cause a denial of service (server process crash) via a certain data string that is sent to multiple simultaneous client connections to TCP port 407.

cpe:/a:apache:http_server:2.0.51

CVE-2004-0811

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:29.730-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

FEDORA FEDORA-2004-313 GENTOO GLSA-200409-33 CONFIRM http://www.apache.org/dist/httpd/patches/apply_to_2.0.51/CAN-2004-0811.patch CONFIRM http://www.apacheweek.com/features/security-20 BID 11239 TRUSTIX 2004-0049 XF apache-satisfy-gain-access(17473) MLIST [httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html MLIST [httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html Unknown vulnerability in Apache 2.0.51 prevents "the merging of the Satisfy directive," which could allow attackers to obtain access to restricted resources contrary to the specified authentication configuration.

CVE-2004-0812

2005-04-14T00:00:00.000-04:00

2017-10-10T21:29:34.793-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://linux.bkbits.net:8080/linux-2.6/cset@3fad673ber4GuU7iWppydzNIyLntEQ CIAC P-047 REDHAT RHSA-2004:549 BID 11794 XF linux-tss-gain-privilege(18346) Unknown vulnerability in the Linux kernel before 2.4.23, on the AMD AMD64 and Intel EM64T architectures, associated with "setting up TSS limits," allows local users to cause a denial of service (crash) and possibly execute arbitrary code.

cpe:/a:ide-cd:ide-cd

CVE-2004-0813

2004-12-31T00:00:00.000-05:00

2017-10-10T21:29:34.857-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SGI 20070602-01-P FULLDISC 20070920 VMSA-2007-0006 Critical security updates for all supported versions of VMware ESX Server, VMware Server, VMware Workstation, VMware ACE, and VMware Player MISC http://lkml.org/lkml/2004/7/30/147 GENTOO GLSA-200711-23 REDHAT RHSA-2007:0465 BID 25749 VUPEN ADV-2007-3229 XF linux-sgio-gain-privileges(17505) Unknown vulnerability in the SG_IO functionality in ide-cd allows local users to bypass read-only access and perform unauthorized write and erase operations.

CVE-2004-0814

2004-12-23T00:00:00.000-05:00

2017-10-10T21:29:34.937-04:00

1.2

LOCAL

HIGH

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=131672 CONFIRM http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=133110 BUGTRAQ 20041214 [USN-38-1] Linux kernel vulnerabilities MANDRAKE MDKSA-2005:022 REDHAT RHSA-2005:293 BUGTRAQ 20041020 CAN-2004-0814: Linux terminal layer races BID 11491 BID 11492 FEDORA FLSA:2336 XF linux-tiocsetd-race-condition(17816) Multiple race conditions in the terminal layer in Linux 2.4.x, and 2.6.x before 2.6.9, allow (1) local users to obtain portions of kernel data via a TIOCSETD ioctl call to a terminal interface that is being accessed by another thread, or (2) remote attackers to cause a denial of service (panic) by switching from console to PPP line discipline, then quickly sending data that is received during the switch.

cpe:/a:samba:samba:2.2.0 cpe:/a:samba:samba:2.2.0a cpe:/a:samba:samba:2.2.1a cpe:/a:samba:samba:2.2.2 cpe:/a:samba:samba:2.2.3 cpe:/a:samba:samba:2.2.3a cpe:/a:samba:samba:2.2.4 cpe:/a:samba:samba:2.2.5 cpe:/a:samba:samba:2.2.6 cpe:/a:samba:samba:2.2.7 cpe:/a:samba:samba:2.2.7a cpe:/a:samba:samba:2.2.8 cpe:/a:samba:samba:2.2.8a cpe:/a:samba:samba:2.2.9 cpe:/a:samba:samba:2.2.11 cpe:/a:samba:samba:2.2a cpe:/a:samba:samba:3.0.0 cpe:/a:samba:samba:3.0.1 cpe:/a:samba:samba:3.0.2 cpe:/a:samba:samba:3.0.2a

CVE-2004-0815

2004-11-03T00:00:00.000-05:00

2018-10-30T12:25:11.107-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONECTIVA CLA-2004:873 BUGTRAQ 20040930 Samba Security Announcement -- Potential Arbitrary File Access SUNALERT 101584 SUNALERT 57664 SUNALERT 200529 CONFIRM http://us4.samba.org/samba/news/#security_2.2.12 DEBIAN DSA-600 IDEFENSE 20040930 Samba Arbitrary File Access Vulnerability MANDRAKE MDKSA-2004:104 SUSE SUSE-SA:2004:035 REDHAT RHSA-2004:498 BUGTRAQ 20041005 ERRATA: Potential Arbitrary File Access (CAN-2004-0815) BID 11281 TRUSTIX 2004-0051 FEDORA FLSA:2102 XF samba-file-access(17556) The unix_clean_name function in Samba 2.2.x through 2.2.11, and 3.0.x before 3.0.2a, trims certain directory names down to absolute paths, which could allow remote attackers to bypass the specified share restrictions and read, write, or list arbitrary files via "/.////" style sequences in pathnames.

CVE-2004-0816

2004-12-23T00:00:00.000-05:00

2017-07-10T21:30:30.043-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MANDRAKE MDKSA-2005:022 SUSE SUSE-SA:2004:037 BID 11488 XF linux-ip-packet-dos(17800) Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service (application crash) via a malformed IP packet.

CVE-2004-0817

2004-12-31T00:00:00.000-05:00

2017-10-10T21:29:35.027-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONECTIVA CLA-2004:870 SUNALERT 201611 DEBIAN DSA-548 GENTOO GLSA-200409-12 MANDRAKE MDKSA-2004:089 REDHAT RHSA-2004:465 BID 11084 XF imlib-bmp-bo(17182) Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file.

CVE-2004-0818

2017-05-11T10:29:01.807-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

cpe:/o:openbsd:openbsd:3.2 cpe:/o:openbsd:openbsd:3.3 cpe:/o:openbsd:openbsd:3.4 cpe:/o:openbsd:openbsd:3.5

CVE-2004-0819

2004-08-25T00:00:00.000-04:00

2017-07-10T21:30:30.167-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040825 Vulnerability: OpenBSD 3.5 Kernel Panic. OPENBSD 20040826 028: RELIABILITY FIX: August 26, 2004 XF openbsd-icmp-echo-dos(17129) The bridge functionality in OpenBSD 3.4 and 3.5, when running a gateway configured as a bridging firewall with the link2 option for IPSec enabled, allows remote attackers to cause a denial of service (crash) via an ICMP echo (ping) packet.

cpe:/a:nullsoft:winamp:2.4 cpe:/a:nullsoft:winamp:2.5e cpe:/a:nullsoft:winamp:2.10 cpe:/a:nullsoft:winamp:2.24 cpe:/a:nullsoft:winamp:2.50 cpe:/a:nullsoft:winamp:2.60::full cpe:/a:nullsoft:winamp:2.60::lite cpe:/a:nullsoft:winamp:2.61::full cpe:/a:nullsoft:winamp:2.62::standard cpe:/a:nullsoft:winamp:2.64 cpe:/a:nullsoft:winamp:2.64::standard cpe:/a:nullsoft:winamp:2.65 cpe:/a:nullsoft:winamp:2.70 cpe:/a:nullsoft:winamp:2.70::full cpe:/a:nullsoft:winamp:2.71 cpe:/a:nullsoft:winamp:2.72 cpe:/a:nullsoft:winamp:2.73 cpe:/a:nullsoft:winamp:2.73::full cpe:/a:nullsoft:winamp:2.74 cpe:/a:nullsoft:winamp:2.75 cpe:/a:nullsoft:winamp:2.76 cpe:/a:nullsoft:winamp:2.77 cpe:/a:nullsoft:winamp:2.78 cpe:/a:nullsoft:winamp:2.79 cpe:/a:nullsoft:winamp:2.80 cpe:/a:nullsoft:winamp:2.81 cpe:/a:nullsoft:winamp:2.91 cpe:/a:nullsoft:winamp:3.0 cpe:/a:nullsoft:winamp:3.1 cpe:/a:nullsoft:winamp:5.01 cpe:/a:nullsoft:winamp:5.02 cpe:/a:nullsoft:winamp:5.03 cpe:/a:nullsoft:winamp:5.04

CVE-2004-0820

2004-08-28T00:00:00.000-04:00

2017-07-10T21:30:30.230-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

AUSCERT ESB-2004.0537 MISC http://www.frsirt.com/exploits/08252004.skinhead.php XF winamp-wsz-execute-code(17124) Winamp before 5.0.4 allows remote attackers to execute arbitrary script in the Local computer zone via script in HTML files that are referenced from XML files contained in a .wsz skin file.

cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3.4 cpe:/o:apple:mac_os_x:10.3.5 cpe:/o:apple:mac_os_x_server:10.2.8 cpe:/o:apple:mac_os_x_server:10.3.4 cpe:/o:apple:mac_os_x_server:10.3.5

CVE-2004-0821

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:30.277-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-0024-09-07 CIAC O-212 CERT-VN VU#704110 BID 11135 XF macos-corefoundation-gain-privileges(17291) The CFPlugIn in Core Foundation framework in Mac OS X allows user supplied libraries to be loaded, which could allow local users to gain privileges.

cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3.4 cpe:/o:apple:mac_os_x:10.3.5 cpe:/o:apple:mac_os_x_server:10.2.8 cpe:/o:apple:mac_os_x_server:10.3.4 cpe:/o:apple:mac_os_x_server:10.3.5

CVE-2004-0822

2004-09-07T00:00:00.000-04:00

2017-07-10T21:30:30.340-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CIAC O-212 CERT-VN VU#545446 APPLE APPLE-SA-2004-09-07 BID 11136 XF macos-corefoundation-bo(17295) Buffer overflow in The Core Foundation framework (CoreFoundation.framework) in Mac OS X 10.2.8, 10.3.4, and 10.3.5 allows local users to execute arbitrary code via a certain environment variable.

cpe:/a:openldap:openldap:1.0 cpe:/a:openldap:openldap:1.0.1 cpe:/a:openldap:openldap:1.0.2 cpe:/a:openldap:openldap:1.0.3 cpe:/a:openldap:openldap:1.1 cpe:/a:openldap:openldap:1.1.1 cpe:/a:openldap:openldap:1.1.2 cpe:/a:openldap:openldap:1.1.3 cpe:/a:openldap:openldap:1.1.4 cpe:/a:openldap:openldap:1.2 cpe:/a:openldap:openldap:1.2.1 cpe:/a:openldap:openldap:1.2.2 cpe:/a:openldap:openldap:1.2.3 cpe:/a:openldap:openldap:1.2.4 cpe:/a:openldap:openldap:1.2.5 cpe:/a:openldap:openldap:1.2.6 cpe:/a:openldap:openldap:1.2.7 cpe:/a:openldap:openldap:1.2.8 cpe:/a:openldap:openldap:1.2.9 cpe:/a:openldap:openldap:1.2.10 cpe:/a:openldap:openldap:1.2.11 cpe:/a:openldap:openldap:1.2.12 cpe:/a:openldap:openldap:1.2.13 cpe:/a:openldap:openldap:2.0 cpe:/a:openldap:openldap:2.0.1 cpe:/a:openldap:openldap:2.0.2 cpe:/a:openldap:openldap:2.0.3 cpe:/a:openldap:openldap:2.0.4 cpe:/a:openldap:openldap:2.0.5 cpe:/a:openldap:openldap:2.0.6 cpe:/a:openldap:openldap:2.0.7 cpe:/a:openldap:openldap:2.0.8 cpe:/a:openldap:openldap:2.0.9 cpe:/a:openldap:openldap:2.0.10 cpe:/a:openldap:openldap:2.0.11 cpe:/a:openldap:openldap:2.0.11_9 cpe:/a:openldap:openldap:2.0.11_11 cpe:/a:openldap:openldap:2.0.11_11s cpe:/a:openldap:openldap:2.0.12 cpe:/a:openldap:openldap:2.0.13 cpe:/a:openldap:openldap:2.0.14 cpe:/a:openldap:openldap:2.0.15 cpe:/a:openldap:openldap:2.0.16 cpe:/a:openldap:openldap:2.0.17 cpe:/a:openldap:openldap:2.0.18 cpe:/a:openldap:openldap:2.0.19 cpe:/a:openldap:openldap:2.0.20 cpe:/a:openldap:openldap:2.0.21 cpe:/a:openldap:openldap:2.0.22 cpe:/a:openldap:openldap:2.0.23 cpe:/a:openldap:openldap:2.0.25 cpe:/a:openldap:openldap:2.0.27 cpe:/a:openldap:openldap:2.1.4 cpe:/a:openldap:openldap:2.1.10 cpe:/a:openldap:openldap:2.1.11 cpe:/a:openldap:openldap:2.1.12 cpe:/a:openldap:openldap:2.1.13 cpe:/a:openldap:openldap:2.1.14 cpe:/a:openldap:openldap:2.1.15 cpe:/a:openldap:openldap:2.1.16 cpe:/a:openldap:openldap:2.1.17 cpe:/a:openldap:openldap:2.1.18 cpe:/a:openldap:openldap:2.1.19 cpe:/a:openldap:openldap:2.1_.20 cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3.4 cpe:/o:apple:mac_os_x:10.3.5 cpe:/o:apple:mac_os_x_server:10.2.8 cpe:/o:apple:mac_os_x_server:10.3.4 cpe:/o:apple:mac_os_x_server:10.3.5

CVE-2004-0823

2004-09-07T00:00:00.000-04:00

2017-10-10T21:29:35.107-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2006-157.htm AUSCERT ESB-2004.0559 REDHAT RHSA-2005:751 APPLE APPLE-SA-2004-09-07 BID 11137 XF openldap-crypt-gain-access(17300) OpenLDAP 1.0 through 2.1.19, as used in Apple Mac OS 10.3.4 and 10.3.5 and possibly other operating systems, may allow certain authentication schemes to use hashed (crypt) passwords in the userPassword attribute as if they were plaintext passwords, which allows remote attackers to re-use hashed passwords without decrypting them.

cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3 cpe:/o:apple:mac_os_x:10.3.1 cpe:/o:apple:mac_os_x:10.3.2 cpe:/o:apple:mac_os_x:10.3.3 cpe:/o:apple:mac_os_x:10.3.4 cpe:/o:apple:mac_os_x:10.3.5

CVE-2004-0824

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:30.463-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1011175 AUSCERT ESB-2004.0559 CIAC O-212 APPLE APPLE-SA-2004-09-07 BID 11139 XF macosx-pppdialer-symlink(17298) PPPDialer for Mac OS X 10.2.8 through 10.3.5 allows local users to overwrite system files via a symlink attack on PPPDialer log files.

cpe:/o:apple:mac_os_x_server:10.2.8 cpe:/o:apple:mac_os_x_server:10.3.4 cpe:/o:apple:mac_os_x_server:10.3.5

CVE-2004-0825

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:30.510-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040908 Re: Apple, Apple Remote Desktop client [Multiple vulnerabilities] SECTRACK 1011176 CIAC O-212 CERT-VN VU#914870 APPLE APPLE-SA-2004-09-07 BID 11138 XF quicktime-dos(17294) QuickTime Streaming Server in Mac OS X Server 10.2.8, 10.3.4, and 10.3.5 allows remote attackers to cause a denial of service (application deadlock) via a certain sequence of operations.

cpe:/a:mozilla:network_security_services:3.2 cpe:/a:mozilla:network_security_services:3.2.1 cpe:/a:mozilla:network_security_services:3.3 cpe:/a:mozilla:network_security_services:3.3.1 cpe:/a:mozilla:network_security_services:3.3.2 cpe:/a:mozilla:network_security_services:3.4 cpe:/a:mozilla:network_security_services:3.4.1 cpe:/a:mozilla:network_security_services:3.4.2 cpe:/a:mozilla:network_security_services:3.5 cpe:/a:mozilla:network_security_services:3.6 cpe:/a:mozilla:network_security_services:3.6.1 cpe:/a:mozilla:network_security_services:3.7 cpe:/a:mozilla:network_security_services:3.7.1 cpe:/a:mozilla:network_security_services:3.7.2 cpe:/a:mozilla:network_security_services:3.7.3 cpe:/a:mozilla:network_security_services:3.7.5 cpe:/a:mozilla:network_security_services:3.7.7 cpe:/a:mozilla:network_security_services:3.8 cpe:/a:mozilla:network_security_services:3.9 cpe:/a:netscape:certificate_server:1.0:patch1 cpe:/a:netscape:certificate_server:4.2 cpe:/a:netscape:directory_server:1.3:patch5 cpe:/a:netscape:directory_server:3.1:patch1 cpe:/a:netscape:directory_server:3.12 cpe:/a:netscape:directory_server:4.1 cpe:/a:netscape:directory_server:4.11 cpe:/a:netscape:directory_server:4.13 cpe:/a:netscape:enterprise_server:2.0 cpe:/a:netscape:enterprise_server:2.0.1c cpe:/a:netscape:enterprise_server:2.0a cpe:/a:netscape:enterprise_server:3.0 cpe:/a:netscape:enterprise_server:3.0.1 cpe:/a:netscape:enterprise_server:3.0.1b cpe:/a:netscape:enterprise_server:3.0.7a::netware cpe:/a:netscape:enterprise_server:3.0l cpe:/a:netscape:enterprise_server:3.1 cpe:/a:netscape:enterprise_server:3.2 cpe:/a:netscape:enterprise_server:3.3 cpe:/a:netscape:enterprise_server:3.4 cpe:/a:netscape:enterprise_server:3.5 cpe:/a:netscape:enterprise_server:3.5::solaris cpe:/a:netscape:enterprise_server:3.5.1 cpe:/a:netscape:enterprise_server:3.6 cpe:/a:netscape:enterprise_server:3.6::solaris cpe:/a:netscape:enterprise_server:3.6:sp1 cpe:/a:netscape:enterprise_server:3.6:sp2 cpe:/a:netscape:enterprise_server:3.6:sp3 cpe:/a:netscape:enterprise_server:4.0 cpe:/a:netscape:enterprise_server:4.1:sp3 cpe:/a:netscape:enterprise_server:4.1:sp4 cpe:/a:netscape:enterprise_server:4.1:sp5 cpe:/a:netscape:enterprise_server:4.1:sp6 cpe:/a:netscape:enterprise_server:4.1:sp7 cpe:/a:netscape:enterprise_server:4.1:sp8 cpe:/a:netscape:enterprise_server:4.1.1::netware cpe:/a:netscape:enterprise_server:5.0::netware cpe:/a:netscape:personalization_engine cpe:/a:sun:java_enterprise_system:2003q4 cpe:/a:sun:java_enterprise_system:2004q2 cpe:/a:sun:java_system_application_server:7.0::enterprise cpe:/a:sun:java_system_application_server:7.0::platform cpe:/a:sun:java_system_application_server:7.0::standard cpe:/a:sun:java_system_application_server:7.0:ur4 cpe:/a:sun:java_system_application_server:7.1 cpe:/a:sun:one_application_server:6.0 cpe:/a:sun:one_application_server:6.0:sp1 cpe:/a:sun:one_application_server:6.0:sp2 cpe:/a:sun:one_web_server:4.1 cpe:/a:sun:one_web_server:4.1:sp1 cpe:/a:sun:one_web_server:4.1:sp10 cpe:/a:sun:one_web_server:4.1:sp11 cpe:/a:sun:one_web_server:4.1:sp12 cpe:/a:sun:one_web_server:4.1:sp13 cpe:/a:sun:one_web_server:4.1:sp14 cpe:/a:sun:one_web_server:4.1:sp2 cpe:/a:sun:one_web_server:4.1:sp3 cpe:/a:sun:one_web_server:4.1:sp4 cpe:/a:sun:one_web_server:4.1:sp5 cpe:/a:sun:one_web_server:4.1:sp6 cpe:/a:sun:one_web_server:4.1:sp7 cpe:/a:sun:one_web_server:4.1:sp8 cpe:/a:sun:one_web_server:4.1:sp9 cpe:/a:sun:one_web_server:6.0:sp3 cpe:/a:sun:one_web_server:6.0:sp4 cpe:/a:sun:one_web_server:6.0:sp5 cpe:/a:sun:one_web_server:6.0:sp7 cpe:/a:sun:one_web_server:6.0:sp8 cpe:/a:sun:one_web_server:6.1 cpe:/a:sun:one_web_server:6.1:sp1 cpe:/a:sun:one_web_server:6.1:sp2 cpe:/o:hp:hp-ux:11.00 cpe:/o:hp:hp-ux:11.11 cpe:/o:hp:hp-ux:11.23::ia64_64-bit

CVE-2004-0826

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:30.590-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

HP SSRT4779 BID 11015 ISS 20040823 Netscape NSS Library Remote Compromise XF sslv2-client-hello-overflow(16314) Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message.

cpe:/a:enlightenment:imlib:1.9 cpe:/a:enlightenment:imlib:1.9.1 cpe:/a:enlightenment:imlib:1.9.2 cpe:/a:enlightenment:imlib:1.9.3 cpe:/a:enlightenment:imlib:1.9.4 cpe:/a:enlightenment:imlib:1.9.5 cpe:/a:enlightenment:imlib:1.9.6 cpe:/a:enlightenment:imlib:1.9.7 cpe:/a:enlightenment:imlib:1.9.8 cpe:/a:enlightenment:imlib:1.9.9 cpe:/a:enlightenment:imlib:1.9.10 cpe:/a:enlightenment:imlib:1.9.11 cpe:/a:enlightenment:imlib:1.9.12 cpe:/a:enlightenment:imlib:1.9.13 cpe:/a:enlightenment:imlib:1.9.14 cpe:/a:enlightenment:imlib2:1.0 cpe:/a:enlightenment:imlib2:1.0.1 cpe:/a:enlightenment:imlib2:1.0.2 cpe:/a:enlightenment:imlib2:1.0.3 cpe:/a:enlightenment:imlib2:1.0.4 cpe:/a:enlightenment:imlib2:1.0.5 cpe:/a:enlightenment:imlib2:1.1 cpe:/a:enlightenment:imlib2:1.1.1 cpe:/a:imagemagick:imagemagick:5.3.3 cpe:/a:imagemagick:imagemagick:5.4.3 cpe:/a:imagemagick:imagemagick:5.4.4.5 cpe:/a:imagemagick:imagemagick:5.4.7 cpe:/a:imagemagick:imagemagick:5.4.8 cpe:/a:imagemagick:imagemagick:5.4.8.2.1.1.0 cpe:/a:imagemagick:imagemagick:5.5.3.2.1.2.0 cpe:/a:imagemagick:imagemagick:5.5.6.0_2003-04-09 cpe:/a:imagemagick:imagemagick:5.5.7 cpe:/a:imagemagick:imagemagick:6.0.2 cpe:/a:sun:java_desktop_system:2.0 cpe:/a:sun:java_desktop_system:2003 cpe:/o:conectiva:linux:9.0 cpe:/o:conectiva:linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:9.2::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1::x86_64 cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::advanced_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:2.1::workstation_ia64 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:fedora_core:core_1.0 cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:redhat:fedora_core:core_3.0 cpe:/o:redhat:linux_advanced_workstation:2.1::ia64 cpe:/o:redhat:linux_advanced_workstation:2.1::itanium_processor cpe:/o:suse:suse_linux:8.0 cpe:/o:suse:suse_linux:8.0::i386 cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.2 cpe:/o:turbolinux:turbolinux:desktop_10.0 cpe:/o:turbolinux:turbolinux:server_7.0 cpe:/o:turbolinux:turbolinux:server_8.0 cpe:/o:turbolinux:turbolinux:workstation_7.0 cpe:/o:turbolinux:turbolinux:workstation_8.0 cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc

CVE-2004-0827

2004-09-16T00:00:00.000-04:00

2017-10-10T21:29:35.170-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SUNALERT 231321 SUNALERT 201006 DEBIAN DSA-547 REDHAT RHSA-2004:480 REDHAT RHSA-2004:494 VUPEN ADV-2008-0412 XF imagemagick-bmp-Bo(17173) Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files.

cpe:/o:ibm:aix:5.2 cpe:/o:ibm:aix:5.3

CVE-2004-0828

2004-11-03T00:00:00.000-05:00

2017-07-10T21:30:30.730-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1011429 BID 11264 XF ctstrtcasd-file-overwrite(17514) The ctstrtcasd program in RSCT 2.3.0.0 and earlier on IBM AIX 5.2 and 5.3 does not properly drop privileges before executing the -f option, which allows local users to modify or create arbitrary files.

cpe:/a:samba:samba:1.9.17 cpe:/a:samba:samba:1.9.17:p1 cpe:/a:samba:samba:1.9.17:p2 cpe:/a:samba:samba:1.9.17:p3 cpe:/a:samba:samba:1.9.17:p4 cpe:/a:samba:samba:1.9.17:p5 cpe:/a:samba:samba:1.9.18 cpe:/a:samba:samba:1.9.18:p1 cpe:/a:samba:samba:1.9.18:p10 cpe:/a:samba:samba:1.9.18:p2 cpe:/a:samba:samba:1.9.18:p3 cpe:/a:samba:samba:1.9.18:p4 cpe:/a:samba:samba:1.9.18:p5 cpe:/a:samba:samba:1.9.18:p6 cpe:/a:samba:samba:1.9.18:p7 cpe:/a:samba:samba:1.9.18:p8 cpe:/a:samba:samba:2.0.0 cpe:/a:samba:samba:2.0.1 cpe:/a:samba:samba:2.0.2 cpe:/a:samba:samba:2.0.3 cpe:/a:samba:samba:2.0.4 cpe:/a:samba:samba:2.0.5 cpe:/a:samba:samba:2.0.5a cpe:/a:samba:samba:2.0.6 cpe:/a:samba:samba:2.0.7 cpe:/a:samba:samba:2.2.0 cpe:/a:samba:samba:2.2.1 cpe:/a:samba:samba:2.2.2 cpe:/a:samba:samba:2.2.3 cpe:/a:samba:samba:2.2.3a cpe:/a:samba:samba:2.2.4 cpe:/a:samba:samba:2.2.5 cpe:/a:samba:samba:2.2.6 cpe:/a:samba:samba:2.2.7 cpe:/a:samba:samba:2.2.7a cpe:/a:samba:samba:2.2.8 cpe:/a:samba:samba:2.2.8a cpe:/a:samba:samba:2.2.9 cpe:/a:samba:samba:2.2.10

CVE-2004-0829

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:30.793-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://samba.org/samba/history/samba-2.2.11.html BUGTRAQ 20040831 Samba FindNextPrintChangeNotify() Error Lets Remote Authenticated Users Crash smbd GENTOO GLSA-200409-14 TRUSTIX 2004-0043 XF samba-findnextprintchangenotify-dos(17138) smbd in Samba before 2.2.11 allows remote attackers to cause a denial of service (daemon crash) by sending a FindNextPrintChangeNotify request without a previous FindFirstPrintChangeNotify, as demonstrated by the SMB client in Windows XP SP2.

cpe:/a:f-secure:f-secure_anti-virus:6.01::ms_exchange cpe:/a:f-secure:f-secure_anti-virus:6.2::ms_exchange cpe:/a:f-secure:f-secure_anti-virus:6.21::ms_exchange cpe:/a:f-secure:f-secure_content_scanner_server:6.31 cpe:/a:f-secure:internet_gatekeeper:6.3 cpe:/a:f-secure:internet_gatekeeper:6.31 cpe:/a:f-secure:internet_gatekeeper:6.32

CVE-2004-0830

2004-09-09T00:00:00.000-04:00

2017-07-10T21:30:30.857-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040910 F-Secure Internet Gatekeeper Content Scanning Server Denial of Service Vulnerability CONFIRM http://www.f-secure.com/security/fsc-2004-2.shtml IDEFENSE 20040909 F-Secure Internet Gatekeeper Content Scanning Server Denial of Service Vulnerability BID 11145 XF fsecure-content-scanner-dos(17307) The Content Scanner Server in F-Secure Anti-Virus for Microsoft Exchange 6.21 and earlier, F-Secure Anti-Virus for Microsoft Exchange 6.01 and earlier, and F-Secure Internet Gatekeeper 6.32 and earlier allow remote attackers to cause a denial of service (service crash due to unhandled exception) via a certain malformed packet.

cpe:/a:mcafee:virusscan:4.5 cpe:/a:mcafee:virusscan:4.5.1

CVE-2004-0831

2004-09-14T00:00:00.000-04:00

2017-07-10T21:30:30.917-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040915 McAfee VirusScan Privilege Escalation Vulnerability [iDEFENSE] IDEFENSE 20040914 McAfee VirusScan Privilege Escalation Vulnerability XF mcafee-virusscan-gain-privileges(17367) McAfee VirusScan 4.5.1 does not drop SYSTEM privileges before allowing users to browse for files via the "System Scan" properties of the System Tray applet, which could allow local users to gain privileges.

cpe:/a:squid:squid:2.5.6

CVE-2004-0832

2004-11-03T00:00:00.000-05:00

2017-10-10T21:29:35.230-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov FEDORA FLSA-2006:152809 GENTOO GLSA-200409-04 MANDRAKE MDKSA-2004:093 BID 11098 CONFIRM http://www.squid-cache.org/bugs/show_bug.cgi?id=1045 TRUSTIX 2004-0047 CONFIRM http://www1.uk.squid-cache.org/squid/Versions/v2/2.5/bugs/#squid-2.5.STABLE6-ntlm_fetch_string XF squid-ntlmssp-dos(17218) The (1) ntlm_fetch_string and (2) ntlm_get_string functions in Squid 2.5.6 and earlier, with NTLM authentication enabled, allow remote attackers to cause a denial of service (application crash) via an NTLMSSP packet that causes a negative value to be passed to memcpy.

cpe:/o:debian:debian_linux:3.0 cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::hppa cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::sparc

CVE-2004-0833

2004-12-23T00:00:00.000-05:00

2017-07-10T21:30:31.027-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

DEBIAN DSA-554 BID 11262 XF sendmail-mail-relay(17531) Sendmail before 8.12.3 on Debian GNU/Linux, when using sasl and sasl-bin, uses a Sendmail configuration script with a fixed username and password, which could allow remote attackers to use Sendmail as an open mail relay and send spam messages.

cpe:/a:mandrakesoft:mandrake_multi_network_firewall:8.2 cpe:/a:speedtouch:speedtouch_usb_driver:1.0 cpe:/a:speedtouch:speedtouch_usb_driver:1.1 cpe:/a:speedtouch:speedtouch_usb_driver:1.2 cpe:/a:speedtouch:speedtouch_usb_driver:1.2_beta1 cpe:/a:speedtouch:speedtouch_usb_driver:1.2_beta2 cpe:/a:speedtouch:speedtouch_usb_driver:1.2_beta3 cpe:/a:speedtouch:speedtouch_usb_driver:1.3 cpe:/o:gentoo:linux:1.4 cpe:/o:mandrakesoft:mandrake_linux:8.2 cpe:/o:mandrakesoft:mandrake_linux:8.2::ppc cpe:/o:mandrakesoft:mandrake_linux:9.0 cpe:/o:mandrakesoft:mandrake_linux:9.1 cpe:/o:mandrakesoft:mandrake_linux:9.1::ppc cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:9.2::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.1 cpe:/o:mandrakesoft:mandrake_linux:10.1::x86_64 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1::x86_64

CVE-2004-0834

2004-12-23T00:00:00.000-05:00

2017-07-10T21:30:31.090-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://sourceforge.net/project/showfiles.php?group_id=32758&package_id=28264&release_id=271734 CONFIRM http://speedtouch.sourceforge.net/index.php?/news.en.html MISC http://www.mail-archive.com/speedtouch@ml.free.fr/msg06688.html XF speedtouch-format-string(17792) Format string vulnerability in Speedtouch USB driver before 1.3.1 allows local users to execute arbitrary code via (1) modem_run, (2) pppoa2, or (3) pppoa3.

cpe:/a:mysql:mysql:4.1.0 cpe:/a:mysql:mysql:4.1.0:alpha cpe:/a:mysql:mysql:4.1.0.0 cpe:/a:mysql:mysql:4.1.1 cpe:/a:mysql:mysql:4.1.2 cpe:/a:mysql:mysql:4.1.2:alpha cpe:/a:mysql:mysql:5.0.0 cpe:/a:mysql:mysql:5.0.0:alpha cpe:/a:mysql:mysql:5.0.0.0 cpe:/a:mysql:mysql:5.0.1 cpe:/a:oracle:mysql:3.20.32a cpe:/a:oracle:mysql:3.21 cpe:/a:oracle:mysql:3.22 cpe:/a:oracle:mysql:3.22.26 cpe:/a:oracle:mysql:3.22.27 cpe:/a:oracle:mysql:3.22.28 cpe:/a:oracle:mysql:3.22.29 cpe:/a:oracle:mysql:3.22.30 cpe:/a:oracle:mysql:3.22.32 cpe:/a:oracle:mysql:3.23 cpe:/a:oracle:mysql:3.23.0:alpha cpe:/a:oracle:mysql:3.23.1 cpe:/a:oracle:mysql:3.23.2 cpe:/a:oracle:mysql:3.23.3 cpe:/a:oracle:mysql:3.23.4 cpe:/a:oracle:mysql:3.23.5 cpe:/a:oracle:mysql:3.23.6 cpe:/a:oracle:mysql:3.23.7 cpe:/a:oracle:mysql:3.23.8 cpe:/a:oracle:mysql:3.23.9 cpe:/a:oracle:mysql:3.23.10 cpe:/a:oracle:mysql:3.23.11 cpe:/a:oracle:mysql:3.23.12 cpe:/a:oracle:mysql:3.23.13 cpe:/a:oracle:mysql:3.23.14 cpe:/a:oracle:mysql:3.23.15 cpe:/a:oracle:mysql:3.23.16 cpe:/a:oracle:mysql:3.23.17 cpe:/a:oracle:mysql:3.23.18 cpe:/a:oracle:mysql:3.23.19 cpe:/a:oracle:mysql:3.23.20:beta cpe:/a:oracle:mysql:3.23.21 cpe:/a:oracle:mysql:3.23.22 cpe:/a:oracle:mysql:3.23.23 cpe:/a:oracle:mysql:3.23.24 cpe:/a:oracle:mysql:3.23.25 cpe:/a:oracle:mysql:3.23.26 cpe:/a:oracle:mysql:3.23.27 cpe:/a:oracle:mysql:3.23.28 cpe:/a:oracle:mysql:3.23.28:gamma cpe:/a:oracle:mysql:3.23.29 cpe:/a:oracle:mysql:3.23.30 cpe:/a:oracle:mysql:3.23.31 cpe:/a:oracle:mysql:3.23.32 cpe:/a:oracle:mysql:3.23.33 cpe:/a:oracle:mysql:3.23.34 cpe:/a:oracle:mysql:3.23.35 cpe:/a:oracle:mysql:3.23.36 cpe:/a:oracle:mysql:3.23.37 cpe:/a:oracle:mysql:3.23.38 cpe:/a:oracle:mysql:3.23.39 cpe:/a:oracle:mysql:3.23.40 cpe:/a:oracle:mysql:3.23.41 cpe:/a:oracle:mysql:3.23.42 cpe:/a:oracle:mysql:3.23.43 cpe:/a:oracle:mysql:3.23.44 cpe:/a:oracle:mysql:3.23.45 cpe:/a:oracle:mysql:3.23.46 cpe:/a:oracle:mysql:3.23.47 cpe:/a:oracle:mysql:3.23.48 cpe:/a:oracle:mysql:3.23.49 cpe:/a:oracle:mysql:3.23.50 cpe:/a:oracle:mysql:3.23.51 cpe:/a:oracle:mysql:3.23.52 cpe:/a:oracle:mysql:3.23.53 cpe:/a:oracle:mysql:3.23.53a cpe:/a:oracle:mysql:3.23.54 cpe:/a:oracle:mysql:3.23.54a cpe:/a:oracle:mysql:3.23.55 cpe:/a:oracle:mysql:3.23.56 cpe:/a:oracle:mysql:3.23.57 cpe:/a:oracle:mysql:3.23.58 cpe:/a:oracle:mysql:4.0.0 cpe:/a:oracle:mysql:4.0.1 cpe:/a:oracle:mysql:4.0.2 cpe:/a:oracle:mysql:4.0.3 cpe:/a:oracle:mysql:4.0.4 cpe:/a:oracle:mysql:4.0.5 cpe:/a:oracle:mysql:4.0.5a cpe:/a:oracle:mysql:4.0.6 cpe:/a:oracle:mysql:4.0.7 cpe:/a:oracle:mysql:4.0.7:gamma cpe:/a:oracle:mysql:4.0.8 cpe:/a:oracle:mysql:4.0.8:gamma cpe:/a:oracle:mysql:4.0.9 cpe:/a:oracle:mysql:4.0.9:gamma cpe:/a:oracle:mysql:4.0.10 cpe:/a:oracle:mysql:4.0.11 cpe:/a:oracle:mysql:4.0.11:gamma cpe:/a:oracle:mysql:4.0.12 cpe:/a:oracle:mysql:4.0.13 cpe:/a:oracle:mysql:4.0.14 cpe:/a:oracle:mysql:4.0.15 cpe:/a:oracle:mysql:4.0.16 cpe:/a:oracle:mysql:4.0.17 cpe:/a:oracle:mysql:4.0.18 cpe:/o:debian:debian_linux:3.0

CVE-2004-0835

2004-11-03T00:00:00.000-05:00

2019-10-07T12:42:37.467-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2018-09-25T13:47:58.297-04:00

ALLOWS_OTHER_ACCESS

MISC http://bugs.mysql.com/bug.php?id=3270 CONECTIVA CLA-2004:892 MISC http://lists.mysql.com/internals/13073 SECTRACK 1011606 SUNALERT 101864 CIAC P-018 DEBIAN DSA-562 GENTOO GLSA-200410-22 CONFIRM http://www.mysql.org/doc/refman/4.1/en/news-4-0-19.html CONFIRM http://www.mysql.org/doc/refman/4.1/en/news-4-1-2.html REDHAT RHSA-2004:597 REDHAT RHSA-2004:611 BID 11357 TRUSTIX 2004-0054 XF mysql-alter-restriction-bypass(17666) MySQL 3.x before 3.23.59, 4.x before 4.0.19, 4.1.x before 4.1.2, and 5.x before 5.0.1, checks the CREATE/INSERT rights of the original table instead of the target table in an ALTER TABLE RENAME operation, which could allow attackers to conduct unauthorized activities.

cpe:/a:mysql:mysql:4.0.0 cpe:/a:mysql:mysql:4.0.1 cpe:/a:mysql:mysql:4.0.2 cpe:/a:mysql:mysql:4.0.3 cpe:/a:mysql:mysql:4.0.4 cpe:/a:mysql:mysql:4.0.5 cpe:/a:mysql:mysql:4.0.5a cpe:/a:mysql:mysql:4.0.6 cpe:/a:mysql:mysql:4.0.7 cpe:/a:mysql:mysql:4.0.7:gamma cpe:/a:mysql:mysql:4.0.8 cpe:/a:mysql:mysql:4.0.8:gamma cpe:/a:mysql:mysql:4.0.9 cpe:/a:mysql:mysql:4.0.9:gamma cpe:/a:mysql:mysql:4.0.10 cpe:/a:mysql:mysql:4.0.11 cpe:/a:mysql:mysql:4.0.11:gamma cpe:/a:mysql:mysql:4.0.12 cpe:/a:mysql:mysql:4.0.13 cpe:/a:mysql:mysql:4.0.14 cpe:/a:mysql:mysql:4.0.15 cpe:/a:mysql:mysql:4.0.16 cpe:/a:mysql:mysql:4.0.17 cpe:/a:mysql:mysql:4.0.18 cpe:/a:mysql:mysql:4.0.19 cpe:/a:mysql:mysql:4.0.20 cpe:/a:oracle:mysql:3.20 cpe:/a:oracle:mysql:3.20.32a cpe:/a:oracle:mysql:3.21 cpe:/a:oracle:mysql:3.22 cpe:/a:oracle:mysql:3.22.26 cpe:/a:oracle:mysql:3.22.27 cpe:/a:oracle:mysql:3.22.28 cpe:/a:oracle:mysql:3.22.29 cpe:/a:oracle:mysql:3.22.30 cpe:/a:oracle:mysql:3.22.32 cpe:/a:oracle:mysql:3.23 cpe:/a:oracle:mysql:3.23.0:alpha cpe:/a:oracle:mysql:3.23.1 cpe:/a:oracle:mysql:3.23.2 cpe:/a:oracle:mysql:3.23.3 cpe:/a:oracle:mysql:3.23.4 cpe:/a:oracle:mysql:3.23.5 cpe:/a:oracle:mysql:3.23.6 cpe:/a:oracle:mysql:3.23.7 cpe:/a:oracle:mysql:3.23.8 cpe:/a:oracle:mysql:3.23.9 cpe:/a:oracle:mysql:3.23.10 cpe:/a:oracle:mysql:3.23.11 cpe:/a:oracle:mysql:3.23.12 cpe:/a:oracle:mysql:3.23.13 cpe:/a:oracle:mysql:3.23.14 cpe:/a:oracle:mysql:3.23.15 cpe:/a:oracle:mysql:3.23.16 cpe:/a:oracle:mysql:3.23.17 cpe:/a:oracle:mysql:3.23.18 cpe:/a:oracle:mysql:3.23.19 cpe:/a:oracle:mysql:3.23.20:beta cpe:/a:oracle:mysql:3.23.21 cpe:/a:oracle:mysql:3.23.22 cpe:/a:oracle:mysql:3.23.23 cpe:/a:oracle:mysql:3.23.24 cpe:/a:oracle:mysql:3.23.25 cpe:/a:oracle:mysql:3.23.26 cpe:/a:oracle:mysql:3.23.27 cpe:/a:oracle:mysql:3.23.28 cpe:/a:oracle:mysql:3.23.28:gamma cpe:/a:oracle:mysql:3.23.29 cpe:/a:oracle:mysql:3.23.30 cpe:/a:oracle:mysql:3.23.31 cpe:/a:oracle:mysql:3.23.32 cpe:/a:oracle:mysql:3.23.33 cpe:/a:oracle:mysql:3.23.34 cpe:/a:oracle:mysql:3.23.35 cpe:/a:oracle:mysql:3.23.36 cpe:/a:oracle:mysql:3.23.37 cpe:/a:oracle:mysql:3.23.38 cpe:/a:oracle:mysql:3.23.39 cpe:/a:oracle:mysql:3.23.40 cpe:/a:oracle:mysql:3.23.41 cpe:/a:oracle:mysql:3.23.42 cpe:/a:oracle:mysql:3.23.43 cpe:/a:oracle:mysql:3.23.44 cpe:/a:oracle:mysql:3.23.45 cpe:/a:oracle:mysql:3.23.46 cpe:/a:oracle:mysql:3.23.47 cpe:/a:oracle:mysql:3.23.48 cpe:/o:debian:debian_linux:3.0

CVE-2004-0836

2004-11-03T00:00:00.000-05:00

2019-10-07T12:40:51.493-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2018-09-25T13:54:36.487-04:00

ALLOWS_ADMIN_ACCESS

MISC http://bugs.mysql.com/bug.php?id=4017 CONECTIVA CLA-2004:892 MISC http://lists.mysql.com/internals/14726 BUGTRAQ 20041125 [USN-32-1] mysql vulnerabilities CIAC P-018 DEBIAN DSA-562 GENTOO GLSA-200410-22 REDHAT RHSA-2004:597 REDHAT RHSA-2004:611 BID 10981 TRUSTIX 2004-0054 XF mysql-realconnect-bo(17047) Buffer overflow in the mysql_real_connect function in MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows remote DNS servers to cause a denial of service and possibly execute arbitrary code via a DNS response with a large address length (h_length).

cpe:/a:mysql:mysql:4.0.0 cpe:/a:mysql:mysql:4.0.1 cpe:/a:mysql:mysql:4.0.2 cpe:/a:mysql:mysql:4.0.3 cpe:/a:mysql:mysql:4.0.4 cpe:/a:mysql:mysql:4.0.5 cpe:/a:mysql:mysql:4.0.5a cpe:/a:mysql:mysql:4.0.6 cpe:/a:mysql:mysql:4.0.7 cpe:/a:mysql:mysql:4.0.7:gamma cpe:/a:mysql:mysql:4.0.8 cpe:/a:mysql:mysql:4.0.8:gamma cpe:/a:mysql:mysql:4.0.9 cpe:/a:mysql:mysql:4.0.9:gamma cpe:/a:mysql:mysql:4.0.10 cpe:/a:mysql:mysql:4.0.11 cpe:/a:mysql:mysql:4.0.11:gamma cpe:/a:mysql:mysql:4.0.12 cpe:/a:mysql:mysql:4.0.13 cpe:/a:mysql:mysql:4.0.14 cpe:/a:mysql:mysql:4.0.15 cpe:/a:mysql:mysql:4.0.16 cpe:/a:mysql:mysql:4.0.17 cpe:/a:mysql:mysql:4.0.18 cpe:/a:mysql:mysql:4.0.19 cpe:/a:mysql:mysql:4.0.20 cpe:/a:mysql:mysql:4.1.0 cpe:/a:oracle:mysql:3.20 cpe:/a:oracle:mysql:3.20.32a cpe:/a:oracle:mysql:3.21 cpe:/a:oracle:mysql:3.22 cpe:/a:oracle:mysql:3.22.26 cpe:/a:oracle:mysql:3.22.27 cpe:/a:oracle:mysql:3.22.28 cpe:/a:oracle:mysql:3.22.29 cpe:/a:oracle:mysql:3.22.30 cpe:/a:oracle:mysql:3.22.32 cpe:/a:oracle:mysql:3.23 cpe:/a:oracle:mysql:3.23.0:alpha cpe:/a:oracle:mysql:3.23.1 cpe:/a:oracle:mysql:3.23.2 cpe:/a:oracle:mysql:3.23.3 cpe:/a:oracle:mysql:3.23.4 cpe:/a:oracle:mysql:3.23.5 cpe:/a:oracle:mysql:3.23.6 cpe:/a:oracle:mysql:3.23.7 cpe:/a:oracle:mysql:3.23.8 cpe:/a:oracle:mysql:3.23.9 cpe:/a:oracle:mysql:3.23.10 cpe:/a:oracle:mysql:3.23.11 cpe:/a:oracle:mysql:3.23.12 cpe:/a:oracle:mysql:3.23.13 cpe:/a:oracle:mysql:3.23.14 cpe:/a:oracle:mysql:3.23.15 cpe:/a:oracle:mysql:3.23.16 cpe:/a:oracle:mysql:3.23.17 cpe:/a:oracle:mysql:3.23.18 cpe:/a:oracle:mysql:3.23.19 cpe:/a:oracle:mysql:3.23.20:beta cpe:/a:oracle:mysql:3.23.21 cpe:/a:oracle:mysql:3.23.22 cpe:/a:oracle:mysql:3.23.23 cpe:/a:oracle:mysql:3.23.24 cpe:/a:oracle:mysql:3.23.25 cpe:/a:oracle:mysql:3.23.26 cpe:/a:oracle:mysql:3.23.27 cpe:/a:oracle:mysql:3.23.28 cpe:/a:oracle:mysql:3.23.28:gamma cpe:/a:oracle:mysql:3.23.29 cpe:/a:oracle:mysql:3.23.30 cpe:/a:oracle:mysql:3.23.31 cpe:/a:oracle:mysql:3.23.32 cpe:/a:oracle:mysql:3.23.33 cpe:/a:oracle:mysql:3.23.34 cpe:/a:oracle:mysql:3.23.35 cpe:/a:oracle:mysql:3.23.36 cpe:/a:oracle:mysql:3.23.37 cpe:/a:oracle:mysql:3.23.38 cpe:/a:oracle:mysql:3.23.39 cpe:/a:oracle:mysql:3.23.40 cpe:/a:oracle:mysql:3.23.41 cpe:/a:oracle:mysql:3.23.42 cpe:/a:oracle:mysql:3.23.43 cpe:/a:oracle:mysql:3.23.44 cpe:/a:oracle:mysql:3.23.45 cpe:/a:oracle:mysql:3.23.46 cpe:/a:oracle:mysql:3.23.47 cpe:/a:oracle:mysql:3.23.48 cpe:/o:debian:debian_linux:3.0

CVE-2004-0837

2004-11-03T00:00:00.000-05:00

2019-10-07T12:40:51.493-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

2018-09-25T13:57:59.923-04:00

MISC http://bugs.mysql.com/2408 CONECTIVA CLA-2004:892 MISC http://lists.mysql.com/internals/16168 MISC http://lists.mysql.com/internals/16173 MISC http://lists.mysql.com/internals/16174 BUGTRAQ 20041125 [USN-32-1] mysql vulnerabilities MISC http://mysql.bkbits.net:8080/mysql-3.23/diffs/myisammrg/myrg_open.c@1.15 SECTRACK 1011606 SUNALERT 101864 CIAC P-018 DEBIAN DSA-562 GENTOO GLSA-200410-22 REDHAT RHSA-2004:597 REDHAT RHSA-2004:611 BID 11357 TRUSTIX 2004-0054 XF mysql-union-dos(17667) MySQL 4.x before 4.0.21, and 3.x before 3.23.49, allows attackers to cause a denial of service (crash or hang) via multiple threads that simultaneously alter MERGE table UNIONs.

cpe:/h:lexar:jumpdrive_secure

CVE-2004-0838

2004-09-13T00:00:00.000-04:00

2017-07-10T21:30:31.323-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov ATSTAKE A091304-1 BID 11162 XF jumpdrive-safeguard-obtain-password(17342) Lexar Safe Guard for JumpDrive Secure 1.0 stores the password insecurely in memory using XOR encryption, which allows local users to read the password directly from the device and access the password protected part of the drive.

cpe:/a:avaya:ip600_media_servers cpe:/a:microsoft:ie:5.0.1 cpe:/a:microsoft:ie:5.0.1:sp1 cpe:/a:microsoft:ie:5.0.1:sp2 cpe:/a:microsoft:ie:5.0.1:sp3 cpe:/a:microsoft:ie:5.0.1:sp4 cpe:/a:microsoft:ie:5.5 cpe:/a:microsoft:ie:5.5:sp1 cpe:/a:microsoft:ie:5.5:sp2 cpe:/a:microsoft:ie:6.0 cpe:/a:microsoft:ie:6.0:sp1 cpe:/a:microsoft:ie:6.0:sp2 cpe:/a:nortel:ip_softphone_2050 cpe:/a:nortel:mobile_voice_client_2050 cpe:/a:nortel:optivity_telephony_manager cpe:/a:nortel:symposium_web_centre_portal cpe:/a:nortel:symposium_web_client cpe:/h:avaya:definity_one_media_server cpe:/h:avaya:s3400 cpe:/h:avaya:s8100 cpe:/o:avaya:modular_messaging_message_storage_server:1.1 cpe:/o:avaya:modular_messaging_message_storage_server:2.0 cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2000::sp1 cpe:/o:microsoft:windows_2000::sp2 cpe:/o:microsoft:windows_2000::sp3 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server:enterprise::64-bit cpe:/o:microsoft:windows_2003_server:enterprise_64-bit cpe:/o:microsoft:windows_2003_server:r2::64-bit cpe:/o:microsoft:windows_2003_server:r2::datacenter_64-bit cpe:/o:microsoft:windows_2003_server:standard::64-bit cpe:/o:microsoft:windows_2003_server:web cpe:/o:microsoft:windows_98::gold cpe:/o:microsoft:windows_98se cpe:/o:microsoft:windows_me cpe:/o:microsoft:windows_xp:::64-bit cpe:/o:microsoft:windows_xp:::home cpe:/o:microsoft:windows_xp:::media_center cpe:/o:microsoft:windows_xp::gold:professional cpe:/o:microsoft:windows_xp::sp1:64-bit cpe:/o:microsoft:windows_xp::sp1:home cpe:/o:microsoft:windows_xp::sp1:media_center cpe:/o:microsoft:windows_xp::sp2:home cpe:/o:microsoft:windows_xp::sp2:media_center cpe:/o:microsoft:windows_xp::sp2:tablet_pc

CVE-2004-0839

2004-08-18T00:00:00.000-04:00

2019-04-30T10:27:13.913-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040818 What A Drag II XP SP2 BUGTRAQ 20040824 What A Drag! -revisited- FULLDISC 20040818 What A Drag II XP SP2 CERT-VN VU#526089 BID 10973 CERT TA04-293A MS MS04-038 XF ie-dragdrop-code-execution(17044) Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows remote attackers to install arbitrary programs via a web page that uses certain styles and the AnchorClick behavior, popup windows, and drag-and-drop capabilities to drop the program in the local startup folder, as demonstrated by "wottapoop.html".

cpe:/a:microsoft:exchange_server:2003 cpe:/o:microsoft:windows_2003_server:64-bit cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_xp:::64-bit

CVE-2004-0840

2004-11-03T00:00:00.000-05:00

2018-10-12T17:35:10.607-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CERT-VN VU#394792 BID 11374 MS MS04-035 XF win2k3-smtp-execute-code(17621) XF win-ms04035-patch(17660) The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a malicious DNS response message containing length values that are not properly validated.

CVE-2004-0841

2004-12-23T00:00:00.000-05:00

2018-10-12T17:35:11.903-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20040712 Brand New Hole: Internet Explorer: HijackClick 3 SECTRACK 1010679 CERT-VN VU#413886 BUGTRAQ 20040711 HijackClick 3 BUGTRAQ 20040712 Re: HijackClick 3 BID 10690 CERT TA04-293A MS MS04-038 XF ie-popupshow-perform-actions(16675) Internet Explorer 6.x allows remote attackers to install arbitrary programs via mousedown events that call the Popup.show method and use drag-and-drop actions in a popup window, aka "HijackClick 3" and the "Script in Image Tag File Download Vulnerability."

CVE-2004-0842

2004-12-23T00:00:00.000-05:00

2018-10-12T17:35:14.247-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20040728 Re: Crash IE with 11 bytes ;) FULLDISC 20040723 Crash IE with 11 bytes ;) FULLDISC 20040728 Re: Crash IE with 11 bytes ;) CIAC P-006 MISC http://www.ecqurity.com/adv/IEstyle.html CERT-VN VU#291304 MISC http://www.securiteam.com/exploits/5NP042KF5A.html BID 10816 CERT TA04-293A MS MS04-038 XF ie-popupshow-perform-actions(16675) Internet Explorer 6.0 SP1 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (application crash from "memory corruption") via certain malformed Cascading Style Sheet (CSS) elements that trigger heap-based buffer overflows, as demonstrated using the "<STYLE>@;/*" string, possibly due to a missing comment terminator that may cause an invalid length to trigger a large memory copy operation, aka the "CSS Heap Memory Corruption Vulnerability."

cpe:/a:microsoft:ie:5.5 cpe:/a:microsoft:ie:6:windows_server_2003_sp1

CVE-2004-0843

2004-11-03T00:00:00.000-05:00

2018-10-12T17:35:17.217-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CERT-VN VU#625616 CERT TA04-293A MS MS04-038 XF ie-ms04038-patch(17651) XF ie-plugin-address-spoofing(17655) Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and thereby spoof web pages, facilitating phishing attacks, aka the "Plug-in Navigation Address Bar Spoofing Vulnerability."

cpe:/a:microsoft:ie:6:windows_server_2003_sp1

CVE-2004-0844

2004-11-03T00:00:00.000-05:00

2018-10-12T17:35:18.983-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20041128 Address Bar Spoofing on Double Byte Character Set Locale Vulnerability (CAN-2004-0844) Patched in MS04-038 NTBUGTRAQ 20041128 Address Bar Spoofing on Double Byte Character Set Locale Vulnerability (CAN-2004-0844) Patched in MS04-038 CERT-VN VU#431576 CERT TA04-293A MS MS04-038 XF ie-ms04038-patch(17651) XF ie-dbcs-obtain-information(17652) Internet Explorer 6 on Double Byte Character Set (DBCS) systems allows remote attackers to alter displayed address bars and spoof web pages via a URL containing special characters, facilitating phishing attacks, aka the "Address Bar Spoofing on Double Byte Character Set Systems Vulnerability."

cpe:/a:microsoft:ie:5.01 cpe:/a:microsoft:ie:5.5 cpe:/a:microsoft:ie:6:windows_server_2003_sp1

CVE-2004-0845

2004-11-03T00:00:00.000-05:00

2018-10-12T17:35:20.297-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20041013 ACROS Security: Poisoning Cached HTTPS Documents in Internet Explorer MISC http://www.acrossecurity.com/aspr/ASPR-2004-10-13-1-PUB.txt CERT-VN VU#795720 CERT TA04-293A MS MS04-038 XF ie-ms04038-patch(17651) XF ie-cache-ssl-obtain-information(17654) Internet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote attackers to obtain information or spoof content via a web site with the same host name as the target web site, whose content is cached and reused when the user visits the target web site.

cpe:/a:microsoft:excel:2000 cpe:/a:microsoft:excel:2001 cpe:/a:microsoft:excel:2002 cpe:/a:microsoft:excel:x cpe:/a:microsoft:office:2000:sp3 cpe:/a:microsoft:office:2001 cpe:/a:microsoft:office:v.x

CVE-2004-0846

2004-11-03T00:00:00.000-05:00

2018-10-12T17:35:22.107-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BUGTRAQ 20041013 Buffer Overflow In Microsoft Excel CIAC P-009 CERT-VN VU#274496 MS MS04-033 XF excel-execute-code(17653) XF excel-ms04033-patch(17683) Unknown vulnerability in Microsoft Excel 2000, 2002, 2001 for Mac, and v.X for Mac allows remote attackers to execute arbitrary code via a malicious file containing certain parameters that are not properly validated.

cpe:/a:microsoft:asp.net:1.1 cpe:/a:microsoft:asp.net:1.1:sp1

CVE-2004-0847

2004-11-03T00:00:00.000-05:00

2018-10-12T17:35:23.200-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

NTBUGTRAQ 20040914 Security bug in .NET Forms Authentication MISC http://sourceforge.net/mailarchive/forum.php?thread_id=5671607&forum_id=24754 CERT-VN VU#283646 BID 11342 CERT TA05-039A MS MS05-004 XF windows-forms-security-bypass(17644) The Microsoft .NET forms authentication capability for ASP.NET allows remote attackers to bypass authentication for .aspx files in restricted directories via a request containing a (1) "\" (backslash) or (2) "%5C" (encoded backslash), aka "Path Validation Vulnerability."

cpe:/a:microsoft:office cpe:/a:microsoft:office:xp:sp1 cpe:/a:microsoft:office:xp:sp2 cpe:/a:microsoft:office:xp:sp3 cpe:/a:microsoft:powerpoint:2002 cpe:/a:microsoft:powerpoint:2002:sp1 cpe:/a:microsoft:powerpoint:2002:sp2 cpe:/a:microsoft:powerpoint:2002:sp3 cpe:/a:microsoft:project:2002 cpe:/a:microsoft:project:2002:sp1 cpe:/a:microsoft:visio:2002 cpe:/a:microsoft:visio:2002:sp1 cpe:/a:microsoft:visio:2002:sp2 cpe:/a:microsoft:visio:2002:sp2:professional cpe:/a:microsoft:visio:2002:sp2:standard cpe:/a:microsoft:word:2002 cpe:/a:microsoft:word:2002:sp1 cpe:/a:microsoft:word:2002:sp2 cpe:/a:microsoft:word:2002:sp3 cpe:/a:microsoft:works:2002 cpe:/a:microsoft:works:2003 cpe:/a:microsoft:works:2004

CVE-2004-0848

2005-02-08T00:00:00.000-05:00

2018-10-12T17:35:24.170-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CERT-VN VU#416001 CERT TA05-039A MS MS05-005 XF ms-url-bo(19107) Buffer overflow in Microsoft Office XP allows remote attackers to execute arbitrary code via a link with a URL file location containing long inputs after (1) "%00 (null byte) in .doc filenames or (2) "%0a" (carriage return) in .rtf filenames.

cpe:/a:gnu:radius:0.92.1 cpe:/a:gnu:radius:0.93 cpe:/a:gnu:radius:0.94 cpe:/a:gnu:radius:0.95 cpe:/a:gnu:radius:0.96 cpe:/a:gnu:radius:1.1 cpe:/a:gnu:radius:1.2

CVE-2004-0849

2004-12-23T00:00:00.000-05:00

2017-07-10T21:30:32.090-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MLIST [Info-gnu-radius] 20040915 GNU Radius 1.2.94. IDEFENSE 20040915 GNU Radius SNMP String Length Integer Overflow Denial of Service Vulnerability XF radius-asndecodestring-bo(17391) Integer overflow in the asn_decode_string() function defined in asn1.c in radiusd for GNU Radius 1.1 and 1.2 before 1.2.94, when compiled with the --enable-snmp option, allows remote attackers to cause a denial of service (daemon crash) via certain SNMP requests.

cpe:/a:joerg_schilling:star_tape_archiver:1.5_a45

CVE-2004-0850

2004-12-23T00:00:00.000-05:00

2017-07-10T21:30:32.167-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1011195 GENTOO GLSA-200409-11 CERT-VN VU#339089 BID 11141 XF star-ssh-gain-privileges(17297) Star before 1.5_alpha46 does not drop the effective user ID (euid) before calling external programs, which could allow local users to gain privileges by modifying the RSH environment variable to reference a malicious program.

cpe:/a:ulrich_callmeier:net-acct:0.6 cpe:/a:ulrich_callmeier:net-acct:0.7 cpe:/a:ulrich_callmeier:net-acct:0.71

CVE-2004-0851

2004-09-08T00:00:00.000-04:00

2017-07-10T21:30:32.260-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://exorsus.net/projects/net-acct/net-acct-notempfiles.patch BUGTRAQ 20040908 Insecure Temporary File Creation Vulnerability in Net-Acct DEBIAN DSA-559 BID 11125 XF net-acct-tmp-symlink(17283) The (1) write_list and (2) dump_curr_list functions in Net-Acct before 0.71 allows local users to overwrite arbitrary files via a symlink attack on temporary files.

cpe:/a:htget:htget:0.93

CVE-2004-0852

2004-12-20T00:00:00.000-05:00

2017-07-10T21:30:32.323-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

DEBIAN DSA-611 XF htget-bo(18603) Buffer overflow in htget 0.93 allows remote attackers to execute arbitrary code via a crafted URL.

CVE-2004-0853

2017-05-11T10:29:01.837-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

CVE-2004-0854

2017-05-11T10:29:01.853-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

CVE-2004-0855

2017-05-11T10:29:01.870-04:00

2017-05-11T10:29:01.887-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

CVE-2004-0856

2017-05-11T10:29:01.900-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

CVE-2004-0857

2017-05-11T10:29:01.917-04:00

2017-05-11T10:29:01.933-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

CVE-2004-0858

2017-05-11T10:29:01.947-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

CVE-2004-0859

2017-05-11T10:29:01.963-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

CVE-2004-0860

2017-05-11T10:29:01.993-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

CVE-2004-0861

2017-05-11T10:29:02.010-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

cpe:/a:kde:konqueror:2.1.1 cpe:/a:kde:konqueror:2.1.2 cpe:/a:kde:konqueror:2.2.1 cpe:/a:kde:konqueror:2.2.2 cpe:/a:kde:konqueror:3.0 cpe:/a:kde:konqueror:3.0.1 cpe:/a:kde:konqueror:3.0.2 cpe:/a:kde:konqueror:3.0.3 cpe:/a:kde:konqueror:3.0.5 cpe:/a:kde:konqueror:3.0.5b cpe:/a:kde:konqueror:3.1 cpe:/a:kde:konqueror:3.1.1 cpe:/a:kde:konqueror:3.1.2 cpe:/a:kde:konqueror:3.1.3 cpe:/a:kde:konqueror:3.1.4 cpe:/a:kde:konqueror:3.1.5 cpe:/a:kde:konqueror:3.2.1 cpe:/a:kde:konqueror:3.2.3 cpe:/a:microsoft:ie:6.0 cpe:/a:microsoft:ie:6.0:sp1 cpe:/a:microsoft:ie:6.0:sp2 cpe:/a:mozilla:firefox:0.9.2 cpe:/o:suse:suse_linux:1.0::desktop cpe:/o:suse:suse_linux:8::enterprise_server cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0

CVE-2004-0866

2004-09-16T00:00:00.000-04:00

2017-07-10T21:30:32.370-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20040916 wp-04-0001: Multiple Browser Cookie Injection Vulnerabilities SECTRACK 1011332 BID 11186 XF web-browser-session-hijack(17415) Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.

CVE-2004-0867

2004-12-23T00:00:00.000-05:00

2017-07-10T21:30:32.433-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://kuza55.blogspot.com/2008/02/understanding-cookie-security.html BUGTRAQ 20040916 wp-04-0001: Multiple Browser Cookie Injection Vulnerabilities SECTRACK 1011331 BID 11186 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=252342 XF web-browser-session-hijack(17415) Mozilla Firefox 0.9.2 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session. NOTE: it was later reported that 2.x is also affected.

CVE-2004-0868

2004-12-23T00:00:00.000-05:00

2008-09-10T15:28:06.430-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-0866. Reason: This candidate is a duplicate of CVE-2004-0866. Notes: The description for CVE-2004-0866 was inadvertently attached to this issue instead. All CVE users should reference CVE-2004-0866 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/a:microsoft:ie:6:windows_server_2003_sp1

CVE-2004-0869

2004-09-16T00:00:00.000-04:00

2017-07-10T21:30:32.480-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040916 wp-04-0001: Multiple Browser Cookie Injection Vulnerabilities SECTRACK 1011332 MISC http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt XF web-browser-cookie-session-hijack(17417) Internet Explorer does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."

CVE-2004-0870

2004-09-16T00:00:00.000-04:00

2017-07-10T21:30:32.543-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040916 wp-04-0001: Multiple Browser Cookie Injection Vulnerabilities SECTRACK 1011330 MISC http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt XF web-browser-cookie-session-hijack(17417) KDE Konqueror does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."

cpe:/a:mozilla:mozilla:0.9.2

CVE-2004-0871

2004-09-16T00:00:00.000-04:00

2017-07-10T21:30:32.590-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040916 wp-04-0001: Multiple Browser Cookie Injection Vulnerabilities SECTRACK 1011331 MISC http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt XF web-browser-cookie-session-hijack(17417) Mozilla does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."

cpe:/a:opera_software:opera_web_browser:7.51

CVE-2004-0872

2004-09-16T00:00:00.000-04:00

2017-07-10T21:30:32.637-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040916 wp-04-0001: Multiple Browser Cookie Injection Vulnerabilities SECTRACK 1011329 MISC http://www.westpoint.ltd.uk/advisories/wp-04-0001.txt XF web-browser-cookie-session-hijack(17417) Opera does not prevent cookies that are sent over an insecure channel (HTTP) from also being sent over a secure channel (HTTPS/SSL) in the same domain, which could allow remote attackers to steal cookies and conduct unauthorized activities, aka "Cross Security Boundary Cookie Injection."

cpe:/a:apple:ichat:1.0.1 cpe:/a:apple:ichat_av:2.0 cpe:/a:apple:ichat_av:2.1

CVE-2004-0873

2004-12-23T00:00:00.000-05:00

2017-07-10T21:30:32.700-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

APPLE APPLE-SA-2004-09-16 XF ichatav-link-app-execute(17420) Apple iChat AV 2.1, AV 2.0, and 1.0.1 allows remote attackers to execute arbitrary programs via a "link" that references the program.

CVE-2004-0874

2005-01-10T00:00:00.000-05:00

2008-09-10T15:28:07.023-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-1123. Reason: This candidate is a reservation duplicate of CVE-2004-1123. Notes: All CVE users should reference CVE-2004-1123 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/a:phpgroupware:phpgroupware:0.9.12 cpe:/a:phpgroupware:phpgroupware:0.9.13 cpe:/a:phpgroupware:phpgroupware:0.9.14.003 cpe:/a:phpgroupware:phpgroupware:0.9.14.005 cpe:/a:phpgroupware:phpgroupware:0.9.14.006 cpe:/a:phpgroupware:phpgroupware:0.9.14.007 cpe:/a:phpgroupware:phpgroupware:0.9.16.000 cpe:/a:phpgroupware:phpgroupware:0.9.16.002 cpe:/a:phpgroupware:phpgroupware:0.9.16_rc1

CVE-2004-0875

2004-12-23T00:00:00.000-05:00

2017-07-10T21:30:32.747-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://downloads.phpgroupware.org/changelog GENTOO GLSA-200409-22 XF phpgroupware-xss(17289) Multiple cross-site scripting (XSS) vulnerabilities in Phpgroupware (aka webdistro) 0.9.16.002 and earlier allow remote attackers to insert arbitrary HTML or web script, as demonstrated with a request to the wiki module.

cpe:/a:getmail:getmail:2.3.7 cpe:/a:getmail:getmail:3.x cpe:/a:getmail:getmail:4.0 cpe:/a:getmail:getmail:4.0.0_b10 cpe:/a:getmail:getmail:4.0.1 cpe:/a:getmail:getmail:4.0.2 cpe:/a:getmail:getmail:4.0.3 cpe:/a:getmail:getmail:4.0.4 cpe:/a:getmail:getmail:4.0.5 cpe:/a:getmail:getmail:4.0.6 cpe:/a:getmail:getmail:4.0.7 cpe:/a:getmail:getmail:4.0.8 cpe:/a:getmail:getmail:4.0.9 cpe:/a:getmail:getmail:4.0.10 cpe:/a:getmail:getmail:4.0.11 cpe:/a:getmail:getmail:4.0.12 cpe:/a:getmail:getmail:4.0.13 cpe:/a:getmail:getmail:4.1 cpe:/a:getmail:getmail:4.1.1 cpe:/a:getmail:getmail:4.1.2 cpe:/a:getmail:getmail:4.1.3 cpe:/a:getmail:getmail:4.1.4 cpe:/a:getmail:getmail:4.1.5 cpe:/o:gentoo:linux:1.4 cpe:/o:slackware:slackware_linux:9.1 cpe:/o:slackware:slackware_linux:10.0 cpe:/o:slackware:slackware_linux:current

CVE-2004-0880

2005-01-27T00:00:00.000-05:00

2017-07-10T21:30:32.807-04:00

1.2

LOCAL

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040919 Local root compromise possible with getmail GENTOO GLSA-200409-32 DEBIAN DSA-553 CONFIRM http://www.qcc.ca/~charlesc/software/getmail-4/CHANGELOG XF getmail-mbox-race-condition(17437) getmail 4.x before 4.2.0, when run as root, allows local users to overwrite arbitrary files via a symlink attack on an mbox file.

CVE-2004-0881

2005-01-27T00:00:00.000-05:00

2017-07-10T21:30:32.870-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040919 Local root compromise possible with getmail GENTOO GLSA-200409-32 DEBIAN DSA-553 CONFIRM http://www.qcc.ca/~charlesc/software/getmail-4/CHANGELOG XF getmail-maildir-race-condition(17439) getmail 4.x before 4.2.0, and other versions before 3.2.5, when run as root, allows local users to write files in arbitrary directories via a symlink attack on subdirectories in the maildir.

cpe:/a:samba:samba:3.0.0 cpe:/a:samba:samba:3.0.1 cpe:/a:samba:samba:3.0.2 cpe:/a:samba:samba:3.0.2a cpe:/a:samba:samba:3.0.3 cpe:/a:samba:samba:3.0.4 cpe:/a:samba:samba:3.0.4:rc1 cpe:/a:samba:samba:3.0.5 cpe:/a:samba:samba:3.0.6 cpe:/a:samba:samba:3.0.7 cpe:/o:conectiva:linux:10.0 cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::advanced_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:2.1::workstation_ia64 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:redhat:fedora_core:core_3.0 cpe:/o:redhat:linux_advanced_workstation:2.1::ia64 cpe:/o:redhat:linux_advanced_workstation:2.1::itanium_processor cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc

CVE-2004-0882

2005-01-27T00:00:00.000-05:00

2018-10-30T12:25:11.107-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SCO SCOSA-2005.17 SGI 20041201-01-P CONECTIVA CLA-2004:899 APPLE APPLE-SA-2005-03-21 BUGTRAQ 20041115 Advisory 13/2004: Samba 3.x QFILEPATHINFO unicode filename buffer overflow BUGTRAQ 20041115 [SAMBA] CAN-2004-0882: Possiebl Buffer Overrun in smbd BUGTRAQ 20041217 [OpenPKG-SA-2004.054] OpenPKG Security Advisory (samba) MISC http://security.e-matters.de/advisories/132004.html SECTRACK 1012235 CIAC P-038 CERT-VN VU#457622 SUSE SUSE-SA:2004:040 TRUSTIX 2004-0058 XF samba-qfilepathinfo-bo(18070) Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a small "maximum data bytes" value.

cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.4.0:test1 cpe:/o:linux:linux_kernel:2.4.0:test10 cpe:/o:linux:linux_kernel:2.4.0:test11 cpe:/o:linux:linux_kernel:2.4.0:test12 cpe:/o:linux:linux_kernel:2.4.0:test2 cpe:/o:linux:linux_kernel:2.4.0:test3 cpe:/o:linux:linux_kernel:2.4.0:test4 cpe:/o:linux:linux_kernel:2.4.0:test5 cpe:/o:linux:linux_kernel:2.4.0:test6 cpe:/o:linux:linux_kernel:2.4.0:test7 cpe:/o:linux:linux_kernel:2.4.0:test8 cpe:/o:linux:linux_kernel:2.4.0:test9 cpe:/o:linux:linux_kernel:2.4.1 cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:linux:linux_kernel:2.4.3 cpe:/o:linux:linux_kernel:2.4.4 cpe:/o:linux:linux_kernel:2.4.5 cpe:/o:linux:linux_kernel:2.4.6 cpe:/o:linux:linux_kernel:2.4.7 cpe:/o:linux:linux_kernel:2.4.8 cpe:/o:linux:linux_kernel:2.4.9 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.18::x86 cpe:/o:linux:linux_kernel:2.4.18:pre1 cpe:/o:linux:linux_kernel:2.4.18:pre2 cpe:/o:linux:linux_kernel:2.4.18:pre3 cpe:/o:linux:linux_kernel:2.4.18:pre4 cpe:/o:linux:linux_kernel:2.4.18:pre5 cpe:/o:linux:linux_kernel:2.4.18:pre6 cpe:/o:linux:linux_kernel:2.4.18:pre7 cpe:/o:linux:linux_kernel:2.4.18:pre8 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.19:pre1 cpe:/o:linux:linux_kernel:2.4.19:pre2 cpe:/o:linux:linux_kernel:2.4.19:pre3 cpe:/o:linux:linux_kernel:2.4.19:pre4 cpe:/o:linux:linux_kernel:2.4.19:pre5 cpe:/o:linux:linux_kernel:2.4.19:pre6 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.21:pre1 cpe:/o:linux:linux_kernel:2.4.21:pre4 cpe:/o:linux:linux_kernel:2.4.21:pre7 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.23:pre9 cpe:/o:linux:linux_kernel:2.4.23_ow2 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.24_ow1 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.4.26 cpe:/o:linux:linux_kernel:2.4.27 cpe:/o:linux:linux_kernel:2.4.27:pre1 cpe:/o:linux:linux_kernel:2.4.27:pre2 cpe:/o:linux:linux_kernel:2.4.27:pre3 cpe:/o:linux:linux_kernel:2.4.27:pre4 cpe:/o:linux:linux_kernel:2.4.27:pre5 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.0:test1 cpe:/o:linux:linux_kernel:2.6.0:test10 cpe:/o:linux:linux_kernel:2.6.0:test11 cpe:/o:linux:linux_kernel:2.6.0:test2 cpe:/o:linux:linux_kernel:2.6.0:test3 cpe:/o:linux:linux_kernel:2.6.0:test4 cpe:/o:linux:linux_kernel:2.6.0:test5 cpe:/o:linux:linux_kernel:2.6.0:test6 cpe:/o:linux:linux_kernel:2.6.0:test7 cpe:/o:linux:linux_kernel:2.6.0:test8 cpe:/o:linux:linux_kernel:2.6.0:test9 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.6:rc1 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.7:rc1 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.8:rc1 cpe:/o:linux:linux_kernel:2.6.8:rc2 cpe:/o:linux:linux_kernel:2.6.8:rc3 cpe:/o:linux:linux_kernel:2.6.9:2.6.20 cpe:/o:linux:linux_kernel:2.6_test9_cvs cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::advanced_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:2.1::workstation_ia64 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:redhat:fedora_core:core_3.0 cpe:/o:redhat:linux_advanced_workstation:2.1::ia64 cpe:/o:redhat:linux_advanced_workstation:2.1::itanium_processor cpe:/o:suse:suse_linux:1.0::desktop cpe:/o:suse:suse_linux:8::enterprise_server cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::enterprise_server cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.2 cpe:/o:trustix:secure_linux:1.5 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1 cpe:/o:trustix:secure_linux:2.2 cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc

CVE-2004-0883

2005-01-10T00:00:00.000-05:00

2017-10-10T21:29:36.200-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20041117 Advisory 14/2004: Linux 2.x smbfs multiple remote vulnerabilities BUGTRAQ 20041118 [USN-30-1] Linux kernel vulnerabilities MISC http://security.e-matters.de/advisories/142004.html DEBIAN DSA-1067 DEBIAN DSA-1069 DEBIAN DSA-1070 DEBIAN DSA-1082 CERT-VN VU#726198 MANDRAKE MDKSA-2005:022 REDHAT RHSA-2004:504 REDHAT RHSA-2004:505 REDHAT RHSA-2004:537 BID 11695 FEDORA FLSA:2336 XF linux-smb-response-dos(18134) XF linux-smbprocreadxdata-dos(18135) XF linux-smbreceivetrans2-dos(18136) Multiple vulnerabilities in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 allow remote samba servers to cause a denial of service (crash) or gain sensitive information from kernel memory via a samba server (1) returning more data than requested to the smb_proc_read function, (2) returning a data offset from outside the samba packet to the smb_proc_readX function, (3) sending a certain TRANS2 fragmented packet to the smb_receive_trans2 function, (4) sending a samba packet with a certain header size to the smb_proc_readX_data function, or (5) sending a certain packet based offset for the data in a packet to the smb_receive_trans2 function.

cpe:/a:cyrus:sasl:1.5.24 cpe:/a:cyrus:sasl:1.5.27 cpe:/a:cyrus:sasl:1.5.28 cpe:/a:cyrus:sasl:2.1.9 cpe:/a:cyrus:sasl:2.1.10 cpe:/a:cyrus:sasl:2.1.11 cpe:/a:cyrus:sasl:2.1.12 cpe:/a:cyrus:sasl:2.1.13 cpe:/a:cyrus:sasl:2.1.14 cpe:/a:cyrus:sasl:2.1.15 cpe:/a:cyrus:sasl:2.1.16 cpe:/a:cyrus:sasl:2.1.17 cpe:/a:cyrus:sasl:2.1.18 cpe:/a:cyrus:sasl:2.1.18_r1 cpe:/o:conectiva:linux:9.0 cpe:/o:conectiva:linux:10.0

CVE-2004-0884

2005-01-27T00:00:00.000-05:00

2017-10-10T21:29:36.263-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=134657 APPLE APPLE-SA-2005-03-21 BUGTRAQ 20050128 [OpenPKG-SA-2005.004] OpenPKG Security Advisory (sasl) REDHAT RHSA-2004:546 CIAC P-003 DEBIAN DSA-563 DEBIAN DSA-568 GENTOO GLSA-200410-05 MANDRAKE MDKSA-2004:106 BID 11347 TRUSTIX 2004-0053 FEDORA FLSA:2137 XF cyrus-sasl-saslpath(17643) The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment variable to find all available SASL plug-ins, which allows local users to execute arbitrary code by modifying the SASL_PATH to point to malicious programs.

CVE-2004-0885

2004-11-03T00:00:00.000-05:00

2017-10-10T21:29:36.340-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://issues.apache.org/bugzilla/show_bug.cgi?id=31505 APPLE APPLE-SA-2005-08-17 APPLE APPLE-SA-2005-08-15 BUGTRAQ 20041015 [OpenPKG-SA-2004.044] OpenPKG Security Advisory (modssl) SUNALERT 102198 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm CONFIRM http://www.apacheweek.com/features/security-20 REDHAT RHSA-2004:562 REDHAT RHSA-2004:600 REDHAT RHSA-2005:816 REDHAT RHSA-2008:0261 BID 11360 UBUNTU USN-177-1 VUPEN ADV-2006-0789 HP HPSBUX01123 XF apache-sslciphersuite-restriction-bypass(17671) MLIST [httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html MLIST [httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html The mod_ssl module in Apache 2.0.35 through 2.0.52, when using the "SSLCipherSuite" directive in directory or location context, allows remote clients to bypass intended restrictions by using any cipher suite that is allowed by the virtual host configuration.

cpe:/a:libtiff:libtiff:3.4 cpe:/a:libtiff:libtiff:3.5.1 cpe:/a:libtiff:libtiff:3.5.2 cpe:/a:libtiff:libtiff:3.5.3 cpe:/a:libtiff:libtiff:3.5.4 cpe:/a:libtiff:libtiff:3.5.5 cpe:/a:libtiff:libtiff:3.5.7 cpe:/a:libtiff:libtiff:3.6.0 cpe:/a:libtiff:libtiff:3.6.1 cpe:/a:pdflib:pdf_library:5.0.2 cpe:/a:wxgtk2:wxgtk2 cpe:/a:wxgtk2:wxgtk2:2.5_.0 cpe:/o:apple:mac_os_x:10.2 cpe:/o:apple:mac_os_x:10.2.1 cpe:/o:apple:mac_os_x:10.2.2 cpe:/o:apple:mac_os_x:10.2.3 cpe:/o:apple:mac_os_x:10.2.4 cpe:/o:apple:mac_os_x:10.2.5 cpe:/o:apple:mac_os_x:10.2.6 cpe:/o:apple:mac_os_x:10.2.7 cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3 cpe:/o:apple:mac_os_x:10.3.1 cpe:/o:apple:mac_os_x:10.3.2 cpe:/o:apple:mac_os_x:10.3.3 cpe:/o:apple:mac_os_x:10.3.4 cpe:/o:apple:mac_os_x:10.3.5 cpe:/o:apple:mac_os_x:10.3.6 cpe:/o:apple:mac_os_x_server:10.2 cpe:/o:apple:mac_os_x_server:10.2.1 cpe:/o:apple:mac_os_x_server:10.2.2 cpe:/o:apple:mac_os_x_server:10.2.3 cpe:/o:apple:mac_os_x_server:10.2.4 cpe:/o:apple:mac_os_x_server:10.2.5 cpe:/o:apple:mac_os_x_server:10.2.6 cpe:/o:apple:mac_os_x_server:10.2.7 cpe:/o:apple:mac_os_x_server:10.2.8 cpe:/o:apple:mac_os_x_server:10.3 cpe:/o:apple:mac_os_x_server:10.3.1 cpe:/o:apple:mac_os_x_server:10.3.2 cpe:/o:apple:mac_os_x_server:10.3.3 cpe:/o:apple:mac_os_x_server:10.3.4 cpe:/o:apple:mac_os_x_server:10.3.5 cpe:/o:apple:mac_os_x_server:10.3.6 cpe:/o:kde:kde:3.2 cpe:/o:kde:kde:3.2.1 cpe:/o:kde:kde:3.2.2 cpe:/o:kde:kde:3.2.3 cpe:/o:kde:kde:3.3 cpe:/o:kde:kde:3.3.1 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::advanced_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:2.1::workstation_ia64 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:redhat:linux_advanced_workstation:2.1::ia64 cpe:/o:redhat:linux_advanced_workstation:2.1::itanium_processor cpe:/o:suse:suse_linux:1.0::desktop cpe:/o:suse:suse_linux:8::enterprise_server cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::enterprise_server cpe:/o:suse:suse_linux:9.1 cpe:/o:trustix:secure_linux:1.5 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1

CVE-2004-0886

2005-01-27T00:00:00.000-05:00

2017-10-10T21:29:36.420-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2004:888 OPENPKG OpenPKG-SA-2004.043 SECTRACK 1011674 SUNALERT 101677 SUNALERT 201072 CIAC P-015 DEBIAN DSA-567 CERT-VN VU#687568 CONFIRM http://www.kde.org/info/security/advisory-20041209-2.txt MANDRAKE MDKSA-2004:109 MANDRAKE MDKSA-2005:052 SUSE SUSE-SA:2004:038 REDHAT RHSA-2004:577 REDHAT RHSA-2005:021 REDHAT RHSA-2005:354 BID 11406 TRUSTIX 2004-0054 XF libtiff-bo(17715) Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via TIFF images that lead to incorrect malloc calls.

cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.6:rc1 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.7:rc1 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.8:rc1 cpe:/o:linux:linux_kernel:2.6.8:rc2 cpe:/o:linux:linux_kernel:2.6.8:rc3 cpe:/o:linux:linux_kernel:2.6.9:2.6.20 cpe:/o:linux:linux_kernel:2.6.10:rc2 cpe:/o:suse:suse_linux:9.0::enterprise_server cpe:/o:suse:suse_linux:9.0::s_390

CVE-2004-0887

2005-01-27T00:00:00.000-05:00

2017-07-10T21:30:33.307-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

DEBIAN DSA-1018 SUSE SUSE-SA:2004:037 BID 11489 XF linux-instruction-gain-privileges(17801) SUSE Linux Enterprise Server 9 on the S/390 platform does not properly handle a certain privileged instruction, which allows local users to gain root privileges.

cpe:/a:easy_software_products:cups:1.0.4 cpe:/a:easy_software_products:cups:1.0.4_8 cpe:/a:easy_software_products:cups:1.1.1 cpe:/a:easy_software_products:cups:1.1.4 cpe:/a:easy_software_products:cups:1.1.4_2 cpe:/a:easy_software_products:cups:1.1.4_3 cpe:/a:easy_software_products:cups:1.1.4_5 cpe:/a:easy_software_products:cups:1.1.6 cpe:/a:easy_software_products:cups:1.1.7 cpe:/a:easy_software_products:cups:1.1.10 cpe:/a:easy_software_products:cups:1.1.12 cpe:/a:easy_software_products:cups:1.1.13 cpe:/a:easy_software_products:cups:1.1.14 cpe:/a:easy_software_products:cups:1.1.15 cpe:/a:easy_software_products:cups:1.1.16 cpe:/a:easy_software_products:cups:1.1.17 cpe:/a:easy_software_products:cups:1.1.18 cpe:/a:easy_software_products:cups:1.1.19 cpe:/a:easy_software_products:cups:1.1.19_rc5 cpe:/a:easy_software_products:cups:1.1.20 cpe:/a:gnome:gpdf:0.112 cpe:/a:gnome:gpdf:0.131 cpe:/a:kde:koffice:1.3 cpe:/a:kde:koffice:1.3.1 cpe:/a:kde:koffice:1.3.2 cpe:/a:kde:koffice:1.3.3 cpe:/a:kde:koffice:1.3_beta1 cpe:/a:kde:koffice:1.3_beta2 cpe:/a:kde:koffice:1.3_beta3 cpe:/a:kde:kpdf:3.2 cpe:/a:pdftohtml:pdftohtml:0.32a cpe:/a:pdftohtml:pdftohtml:0.32b cpe:/a:pdftohtml:pdftohtml:0.33 cpe:/a:pdftohtml:pdftohtml:0.33a cpe:/a:pdftohtml:pdftohtml:0.34 cpe:/a:pdftohtml:pdftohtml:0.35 cpe:/a:pdftohtml:pdftohtml:0.36 cpe:/a:tetex:tetex:1.0.7 cpe:/a:tetex:tetex:2.0 cpe:/a:tetex:tetex:2.0.1 cpe:/a:tetex:tetex:2.0.2 cpe:/a:xpdf:xpdf:0.90 cpe:/a:xpdf:xpdf:0.91 cpe:/a:xpdf:xpdf:0.92 cpe:/a:xpdf:xpdf:0.93 cpe:/a:xpdf:xpdf:1.0 cpe:/a:xpdf:xpdf:1.0a cpe:/a:xpdf:xpdf:1.1 cpe:/a:xpdf:xpdf:2.0 cpe:/a:xpdf:xpdf:2.1 cpe:/a:xpdf:xpdf:2.3 cpe:/a:xpdf:xpdf:3.0 cpe:/o:debian:debian_linux:3.0 cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::hppa cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::sparc cpe:/o:gentoo:linux cpe:/o:kde:kde:3.2 cpe:/o:kde:kde:3.2.1 cpe:/o:kde:kde:3.2.2 cpe:/o:kde:kde:3.2.3 cpe:/o:kde:kde:3.3 cpe:/o:kde:kde:3.3.1 cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::advanced_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:2.1::workstation_ia64 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:redhat:linux_advanced_workstation:2.1::ia64 cpe:/o:redhat:linux_advanced_workstation:2.1::itanium_processor cpe:/o:suse:suse_linux:8.0 cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.2 cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc

CVE-2004-0888

2005-01-27T00:00:00.000-05:00

2017-10-10T21:29:36.513-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONECTIVA CLA-2004:886 SUSE SUSE-SA:2004:039 FEDORA FLSA:2352 DEBIAN DSA-573 DEBIAN DSA-581 DEBIAN DSA-599 GENTOO GLSA-200410-20 GENTOO GLSA-200410-30 MANDRAKE MDKSA-2004:113 MANDRAKE MDKSA-2004:114 MANDRAKE MDKSA-2004:115 MANDRAKE MDKSA-2004:116 REDHAT RHSA-2004:543 REDHAT RHSA-2004:592 REDHAT RHSA-2005:066 REDHAT RHSA-2005:354 BID 11501 FEDORA FLSA:2353 XF xpdf-pdf-bo(17818) UBUNTU USN-9-1 Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.

CVE-2004-0889

2005-01-27T00:00:00.000-05:00

2017-07-10T21:30:33.463-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SUSE SUSE-SA:2004:039 GENTOO GLSA-200410-20 GENTOO GLSA-200410-30 MANDRAKE MDKSA-2004:113 BID 11501 XF xpdf-pdf-file-bo(17819) Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0888.

CVE-2004-0890

2005-01-10T00:00:00.000-05:00

2008-09-10T15:28:11.603-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reasons: This candidate is a reservation duplicate of another candidate. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/a:rob_flynn:gaim:0.10 cpe:/a:rob_flynn:gaim:0.10.3 cpe:/a:rob_flynn:gaim:0.50 cpe:/a:rob_flynn:gaim:0.51 cpe:/a:rob_flynn:gaim:0.52 cpe:/a:rob_flynn:gaim:0.53 cpe:/a:rob_flynn:gaim:0.54 cpe:/a:rob_flynn:gaim:0.55 cpe:/a:rob_flynn:gaim:0.56 cpe:/a:rob_flynn:gaim:0.57 cpe:/a:rob_flynn:gaim:0.58 cpe:/a:rob_flynn:gaim:0.59 cpe:/a:rob_flynn:gaim:0.59.1 cpe:/a:rob_flynn:gaim:0.60 cpe:/a:rob_flynn:gaim:0.61 cpe:/a:rob_flynn:gaim:0.62 cpe:/a:rob_flynn:gaim:0.63 cpe:/a:rob_flynn:gaim:0.64 cpe:/a:rob_flynn:gaim:0.65 cpe:/a:rob_flynn:gaim:0.66 cpe:/a:rob_flynn:gaim:0.67 cpe:/a:rob_flynn:gaim:0.68 cpe:/a:rob_flynn:gaim:0.69 cpe:/a:rob_flynn:gaim:0.70 cpe:/a:rob_flynn:gaim:0.71 cpe:/a:rob_flynn:gaim:0.72 cpe:/a:rob_flynn:gaim:0.73 cpe:/a:rob_flynn:gaim:0.74 cpe:/a:rob_flynn:gaim:0.75 cpe:/a:rob_flynn:gaim:0.78 cpe:/a:rob_flynn:gaim:0.82 cpe:/a:rob_flynn:gaim:0.82.1 cpe:/a:rob_flynn:gaim:1.0 cpe:/a:rob_flynn:gaim:1.0.1 cpe:/o:gentoo:linux cpe:/o:gentoo:linux:1.4 cpe:/o:slackware:slackware_linux:9.0 cpe:/o:slackware:slackware_linux:9.1 cpe:/o:slackware:slackware_linux:10.0 cpe:/o:slackware:slackware_linux:current cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc

CVE-2004-0891

2005-01-27T00:00:00.000-05:00

2017-10-10T21:29:36.590-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://gaim.sourceforge.net/security/?id=9 GENTOO GLSA-200410-23 REDHAT RHSA-2004:604 FEDORA FLSA:2188 XF gaim-msn-slp-bo(17786) XF gaim-msn-slp-dos(17787) XF gaim-file-transfer-dos(17790) UBUNTU USN-8-1 Buffer overflow in the MSN protocol handler for gaim 0.79 to 1.0.1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via an "unexpected sequence of MSNSLP messages" that results in an unbounded copy operation that writes to the wrong buffer.

cpe:/a:microsoft:isa_server:2000 cpe:/a:microsoft:isa_server:2000:sp1 cpe:/a:microsoft:isa_server:2000:sp2 cpe:/a:microsoft:proxy_server:2.0 cpe:/a:microsoft:proxy_server:2.0:sp1 cpe:/o:microsoft:windows_2003_server:2000::small_business_server cpe:/o:microsoft:windows_2003_server:2003::small_business_server

CVE-2004-0892

2005-01-27T00:00:00.000-05:00

2018-10-12T17:35:25.077-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

BID 11605 MS MS04-039 XF isa-cache-reverse-spoof(17906) Microsoft Proxy Server 2.0 and Microsoft ISA Server 2000 (which is included in Small Business Server 2000 and Small Business Server 2003 Premium Edition) allows remote attackers to spoof trusted Internet content on a specially crafted webpage via spoofed reverse DNS lookup results.

cpe:/o:microsoft:windows_2000 cpe:/o:microsoft:windows_2000::sp1 cpe:/o:microsoft:windows_2000::sp2 cpe:/o:microsoft:windows_2000::sp3 cpe:/o:microsoft:windows_2000::sp4 cpe:/o:microsoft:windows_2003_server:datacenter_64-bit:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:enterprise::64-bit cpe:/o:microsoft:windows_2003_server:enterprise:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:enterprise_64-bit cpe:/o:microsoft:windows_2003_server:enterprise_64-bit:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:r2::64-bit cpe:/o:microsoft:windows_2003_server:r2::datacenter_64-bit cpe:/o:microsoft:windows_2003_server:r2:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:standard::64-bit cpe:/o:microsoft:windows_2003_server:standard:sp1_beta_1 cpe:/o:microsoft:windows_2003_server:web cpe:/o:microsoft:windows_2003_server:web:sp1_beta_1 cpe:/o:microsoft:windows_nt:4.0::enterprise_server cpe:/o:microsoft:windows_nt:4.0::server cpe:/o:microsoft:windows_nt:4.0::terminal_server cpe:/o:microsoft:windows_nt:4.0::workstation cpe:/o:microsoft:windows_nt:4.0:sp1:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp1:server cpe:/o:microsoft:windows_nt:4.0:sp1:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp1:workstation cpe:/o:microsoft:windows_nt:4.0:sp2:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp2:server cpe:/o:microsoft:windows_nt:4.0:sp2:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp2:workstation cpe:/o:microsoft:windows_nt:4.0:sp3:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp3:server cpe:/o:microsoft:windows_nt:4.0:sp3:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp3:workstation cpe:/o:microsoft:windows_nt:4.0:sp4:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp4:server cpe:/o:microsoft:windows_nt:4.0:sp4:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp4:workstation cpe:/o:microsoft:windows_nt:4.0:sp5:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp5:server cpe:/o:microsoft:windows_nt:4.0:sp5:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp5:workstation cpe:/o:microsoft:windows_nt:4.0:sp6:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp6:server cpe:/o:microsoft:windows_nt:4.0:sp6:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp6:workstation cpe:/o:microsoft:windows_nt:4.0:sp6a:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp6a:server cpe:/o:microsoft:windows_nt:4.0:sp6a:workstation cpe:/o:microsoft:windows_xp:::64-bit cpe:/o:microsoft:windows_xp:::home cpe:/o:microsoft:windows_xp:::media_center cpe:/o:microsoft:windows_xp::gold:professional cpe:/o:microsoft:windows_xp::sp1:64-bit cpe:/o:microsoft:windows_xp::sp1:home cpe:/o:microsoft:windows_xp::sp1:media_center cpe:/o:microsoft:windows_xp::sp2:home cpe:/o:microsoft:windows_xp::sp2:media_center

CVE-2004-0893

2005-01-10T00:00:00.000-05:00

2019-04-30T10:27:13.913-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MS MS04-044 XF win-kernel-lpc-gain-privileges(18339) The Local Procedure Call (LPC) interface of the Windows Kernel for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the lengths of messages sent to the LPC port, which allows local users to gain privileges, aka "Windows Kernel Vulnerability."

CVE-2004-0894

2005-01-10T00:00:00.000-05:00

2019-04-30T10:27:13.913-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MS MS04-044 XF win-lsass-gain-privileges(18340) LSASS (Local Security Authority Subsystem Service) of Windows 2000 Server and Windows Server 2003 does not properly validate connection information, which allows local users to gain privileges via a specially-designed program.

cpe:/o:microsoft:windows_2003_server:r2 cpe:/o:microsoft:windows_xp::gold

CVE-2004-0897

2005-01-11T00:00:00.000-05:00

2018-10-12T17:35:28.700-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SECTRACK 1012833 CIAC P-095 CERT-VN VU#657118 BID 12228 MS MS05-003 The Indexing Service for Microsoft Windows XP and Server 2003 does not properly validate the length of a message, which allows remote attackers to execute arbitrary code via a buffer overflow attack.

cpe:/o:microsoft:windows_nt:4.0 cpe:/o:microsoft:windows_nt:4.0::alpha cpe:/o:microsoft:windows_nt:4.0::enterprise_server cpe:/o:microsoft:windows_nt:4.0::server cpe:/o:microsoft:windows_nt:4.0::terminal_server cpe:/o:microsoft:windows_nt:4.0::terminal_server_alpha cpe:/o:microsoft:windows_nt:4.0:sp1 cpe:/o:microsoft:windows_nt:4.0:sp1:alpha cpe:/o:microsoft:windows_nt:4.0:sp1:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp1:server cpe:/o:microsoft:windows_nt:4.0:sp1:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp2 cpe:/o:microsoft:windows_nt:4.0:sp2:alpha cpe:/o:microsoft:windows_nt:4.0:sp2:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp2:server cpe:/o:microsoft:windows_nt:4.0:sp2:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp3 cpe:/o:microsoft:windows_nt:4.0:sp3:alpha cpe:/o:microsoft:windows_nt:4.0:sp3:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp3:server cpe:/o:microsoft:windows_nt:4.0:sp3:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp4 cpe:/o:microsoft:windows_nt:4.0:sp4:alpha cpe:/o:microsoft:windows_nt:4.0:sp4:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp4:server cpe:/o:microsoft:windows_nt:4.0:sp4:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp5 cpe:/o:microsoft:windows_nt:4.0:sp5:alpha cpe:/o:microsoft:windows_nt:4.0:sp5:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp5:server cpe:/o:microsoft:windows_nt:4.0:sp5:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp6 cpe:/o:microsoft:windows_nt:4.0:sp6:alpha cpe:/o:microsoft:windows_nt:4.0:sp6:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp6:server cpe:/o:microsoft:windows_nt:4.0:sp6:terminal_server cpe:/o:microsoft:windows_nt:4.0:sp6a cpe:/o:microsoft:windows_nt:4.0:sp6a:alpha cpe:/o:microsoft:windows_nt:4.0:sp6a:enterprise_server cpe:/o:microsoft:windows_nt:4.0:sp6a:server

CVE-2004-0899

2005-01-10T00:00:00.000-05:00

2018-10-12T17:35:29.467-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov MS MS04-042 XF winnt-dhcp-machinename-dos(18341) The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition, with DHCP logging enabled, does not properly validate the length of certain messages, which allows remote attackers to cause a denial of service (application crash) via a malformed DHCP message, aka "Logging Vulnerability."

CVE-2004-0900

2005-01-10T00:00:00.000-05:00

2018-10-12T17:35:30.060-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MS MS04-042 XF winnt-dhcp-hardwareaddress-code-execution(18342) The DHCP Server service for Microsoft Windows NT 4.0 Server and Terminal Server Edition does not properly validate the length of certain messages, which allows remote attackers to execute arbitrary code via a malformed DHCP message, aka the "DHCP Request Vulnerability."

CVE-2004-0901

2005-01-10T00:00:00.000-05:00

2019-04-30T10:27:13.913-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CIAC P-055 IDEFENSE 20041214 Microsoft Word 6.0/95 Document Converter Buffer Overflow Vulnerability MS MS04-041 XF win-converter-font-code-execution(18338) Microsoft Word for Windows 6.0 Converter (MSWRD632.WPC), as used in WordPad, does not properly validate certain data lengths, which allows remote attackers to execute arbitrary code via a .wri, .rtf, and .doc file sent by email or malicious web site, aka "Font Conversion Vulnerability," a different vulnerability than CVE-2004-0571.

cpe:/a:mozilla:mozilla:1.7 cpe:/a:mozilla:mozilla:1.7.1 cpe:/a:mozilla:mozilla:1.7.2 cpe:/a:mozilla:thunderbird:0.7 cpe:/a:mozilla:thunderbird:0.7.1 cpe:/a:mozilla:thunderbird:0.7.2 cpe:/a:mozilla:thunderbird:0.7.3 cpe:/o:conectiva:linux:9.0 cpe:/o:conectiva:linux:10.0 cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::advanced_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:2.1::workstation_ia64 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:fedora_core:core_1.0 cpe:/o:redhat:linux:7.3 cpe:/o:redhat:linux:7.3::i386 cpe:/o:redhat:linux:7.3::i686 cpe:/o:redhat:linux:9.0::i386 cpe:/o:redhat:linux_advanced_workstation:2.1::ia64 cpe:/o:redhat:linux_advanced_workstation:2.1::itanium_processor cpe:/o:suse:suse_linux:1.0::desktop cpe:/o:suse:suse_linux:8::enterprise_server cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::enterprise_server cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1

CVE-2004-0902

2005-01-27T00:00:00.000-05:00

2018-05-02T21:29:26.600-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=226669 CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=245066 CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=256316 CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=258005 HP SSRT4826 FEDORA FLSA:2089 GENTOO GLSA-200409-26 CONFIRM http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3 SUSE SUSE-SA:2004:036 CERT TA04-261A XF mozilla-netscape-nonascii-bo(17378) XF mozilla-nspop3protocol-bo(17379) Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via (1) the "Send page" functionality, (2) certain responses from a malicious POP3 server, or (3) a link containing a non-ASCII hostname.

CVE-2004-0903

2005-01-27T00:00:00.000-05:00

2017-10-10T21:29:37.277-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=257314 HP SSRT4826 FEDORA FLSA:2089 GENTOO GLSA-200409-26 CERT-VN VU#414240 CONFIRM http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3 SUSE SUSE-SA:2004:036 BID 11174 CERT TA04-261A XF mozilla-netscape-nsvcardobj-bo(17380) Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing a message.

CVE-2004-0904

2004-12-31T00:00:00.000-05:00

2017-10-10T21:29:37.357-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=255067 HP SSRT4826 FEDORA FLSA:2089 GENTOO GLSA-200409-26 CERT-VN VU#847200 CONFIRM http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3 SUSE SUSE-SA:2004:036 BID 11171 CERT TA04-261A XF mozilla-netscape-bmp-bo(17381) Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows.

cpe:/a:mozilla:firefox:0.8 cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:firefox:0.9:rc cpe:/a:mozilla:firefox:0.9.1 cpe:/a:mozilla:firefox:0.9.2 cpe:/a:mozilla:firefox:0.9.3 cpe:/a:mozilla:mozilla:1.0 cpe:/a:mozilla:mozilla:1.0:rc1 cpe:/a:mozilla:mozilla:1.0:rc2 cpe:/a:mozilla:mozilla:1.0.1 cpe:/a:mozilla:mozilla:1.0.2 cpe:/a:mozilla:mozilla:1.1 cpe:/a:mozilla:mozilla:1.1:alpha cpe:/a:mozilla:mozilla:1.1:beta cpe:/a:mozilla:mozilla:1.2 cpe:/a:mozilla:mozilla:1.2:alpha cpe:/a:mozilla:mozilla:1.2:beta cpe:/a:mozilla:mozilla:1.2.1 cpe:/a:mozilla:mozilla:1.3 cpe:/a:mozilla:mozilla:1.3.1 cpe:/a:mozilla:mozilla:1.4 cpe:/a:mozilla:mozilla:1.4:alpha cpe:/a:mozilla:mozilla:1.4:beta cpe:/a:mozilla:mozilla:1.4.1 cpe:/a:mozilla:mozilla:1.4.2 cpe:/a:mozilla:mozilla:1.5 cpe:/a:mozilla:mozilla:1.6 cpe:/a:mozilla:mozilla:1.7 cpe:/a:mozilla:mozilla:1.7:rc3 cpe:/a:mozilla:mozilla:1.7.1 cpe:/a:mozilla:mozilla:1.7.2 cpe:/a:netscape:navigator:7.0 cpe:/a:netscape:navigator:7.0.2 cpe:/a:netscape:navigator:7.1 cpe:/a:netscape:navigator:7.2 cpe:/o:conectiva:linux:9.0 cpe:/o:conectiva:linux:10.0 cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::advanced_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:2.1::workstation_ia64 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:fedora_core:core_1.0 cpe:/o:redhat:linux:7.3 cpe:/o:redhat:linux:7.3::i386 cpe:/o:redhat:linux:7.3::i686 cpe:/o:redhat:linux:9.0::i386 cpe:/o:redhat:linux_advanced_workstation:2.1::ia64 cpe:/o:redhat:linux_advanced_workstation:2.1::itanium_processor cpe:/o:suse:suse_linux:1.0::desktop cpe:/o:suse:suse_linux:8::enterprise_server cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::enterprise_server cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1

CVE-2004-0905

2004-09-14T00:00:00.000-04:00

2017-10-10T21:29:37.433-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=250862 HP SSRT4826 FEDORA FLSA:2089 GENTOO GLSA-200409-26 CERT-VN VU#651928 CONFIRM http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3 SUSE SUSE-SA:2004:036 BID 11177 CERT TA04-261A XF mozilla-netscape-sameorigin-bypass(17374) Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute arbitrary code by convincing a user to drag and drop javascript: links to a frame or page in another domain.

cpe:/a:mozilla:mozilla:0.8 cpe:/a:mozilla:mozilla:0.9.2 cpe:/a:mozilla:mozilla:0.9.2.1 cpe:/a:mozilla:mozilla:0.9.3 cpe:/a:mozilla:mozilla:0.9.4 cpe:/a:mozilla:mozilla:0.9.4.1 cpe:/a:mozilla:mozilla:0.9.5 cpe:/a:mozilla:mozilla:0.9.6 cpe:/a:mozilla:mozilla:0.9.7 cpe:/a:mozilla:mozilla:0.9.8 cpe:/a:mozilla:mozilla:0.9.9 cpe:/a:mozilla:mozilla:0.9.35 cpe:/a:mozilla:mozilla:0.9.48 cpe:/a:mozilla:mozilla:1.0 cpe:/a:mozilla:mozilla:1.0:rc1 cpe:/a:mozilla:mozilla:1.0:rc2 cpe:/a:mozilla:mozilla:1.0.1 cpe:/a:mozilla:mozilla:1.0.2 cpe:/a:mozilla:mozilla:1.1 cpe:/a:mozilla:mozilla:1.1:alpha cpe:/a:mozilla:mozilla:1.1:beta cpe:/a:mozilla:mozilla:1.2 cpe:/a:mozilla:mozilla:1.2:alpha cpe:/a:mozilla:mozilla:1.2:beta cpe:/a:mozilla:mozilla:1.2.1 cpe:/a:mozilla:mozilla:1.3 cpe:/a:mozilla:mozilla:1.3.1 cpe:/a:mozilla:mozilla:1.4 cpe:/a:mozilla:mozilla:1.4:alpha cpe:/a:mozilla:mozilla:1.4:beta cpe:/a:mozilla:mozilla:1.4.1 cpe:/a:mozilla:mozilla:1.4.2 cpe:/a:mozilla:mozilla:1.4.4 cpe:/a:mozilla:mozilla:1.5 cpe:/a:mozilla:mozilla:1.5.1 cpe:/a:mozilla:mozilla:1.6 cpe:/a:mozilla:mozilla:1.7 cpe:/a:mozilla:mozilla:1.7:alpha cpe:/a:mozilla:mozilla:1.7:beta cpe:/a:mozilla:mozilla:1.7:rc1 cpe:/a:mozilla:mozilla:1.7:rc2 cpe:/a:mozilla:mozilla:1.7:rc3 cpe:/a:mozilla:mozilla:1.7.1 cpe:/a:mozilla:mozilla:1.7.2 cpe:/a:mozilla:thunderbird:0.1 cpe:/a:mozilla:thunderbird:0.2 cpe:/a:mozilla:thunderbird:0.3 cpe:/a:mozilla:thunderbird:0.4 cpe:/a:mozilla:thunderbird:0.5 cpe:/a:mozilla:thunderbird:0.6 cpe:/a:mozilla:thunderbird:0.7 cpe:/a:mozilla:thunderbird:0.7.1 cpe:/a:mozilla:thunderbird:0.7.2 cpe:/a:mozilla:thunderbird:0.7.3

CVE-2004-0906

2004-12-31T00:00:00.000-05:00

2017-10-10T21:29:37.497-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=231083 CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=235781 GENTOO GLSA-200409-26 CERT-VN VU#653160 CONFIRM http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3 SUSE SUSE-SA:2004:036 REDHAT RHSA-2005:323 BID 11192 XF mozilla-insecure-file-permissions(17375) The XPInstall installer in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 sets insecure permissions for certain installed files within xpi packages, which could allow local users to overwrite arbitrary files or execute arbitrary code.

CVE-2004-0907

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:34.340-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=254303 GENTOO GLSA-200409-26 CONFIRM http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3 XF mozilla-tar-insecure-permissions(17373) The Linux install .tar.gz archives for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8, create certain files with insecure permissions, which could allow local users to overwrite those files and execute arbitrary code.

CVE-2004-0908

2004-12-31T00:00:00.000-05:00

2017-10-10T21:29:37.577-04:00

4.0

NETWORK

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=257523 HP SSRT4826 FEDORA FLSA:2089 GENTOO GLSA-200409-26 CERT-VN VU#460528 CONFIRM http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3 SUSE SUSE-SA:2004:036 BID 11179 XF mozilla-shortcut-clipboard-access(17376) Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows untrusted Javascript code to read and write to the clipboard, and possibly obtain sensitive information, via script-generated events such as Ctrl-Ins.

CVE-2004-0909

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:34.463-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://bugzilla.mozilla.org/show_bug.cgi?id=253942 HP SSRT4826 GENTOO GLSA-200409-26 CERT-VN VU#113192 CONFIRM http://www.mozilla.org/projects/security/known-vulnerabilities.html#mozilla1.7.3 SUSE SUSE-SA:2004:036 XF mozilla-enableprivilege-modify-dialog(17377) Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 may allow remote attackers to trick users into performing unexpected actions, including installing software, via signed scripts that request enhanced abilities using the enablePrivilege parameter, then modify the meaning of certain security-relevant dialog messages.

CVE-2004-0910

2004-11-03T00:00:00.000-05:00

2008-09-10T15:28:13.617-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-0815. Reason: This candidate is a reservation duplicate of CVE-2004-0815. Notes: All CVE users should reference CVE-2004-0815 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/a:debian:netkit:0.17

CVE-2004-0911

2004-11-03T00:00:00.000-05:00

2017-07-10T21:30:34.527-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=273694 DEBIAN DSA-556 BUGTRAQ 20040918 Debian netkit telnetd vulnerability XF telnetd-netkit-bo(17540) telnetd for netkit 0.17 and earlier, and possibly other versions, on Debian GNU/Linux allows remote attackers to cause a denial of service (free of an invalid pointer), a different vulnerability than CVE-2001-0554.

cpe:/a:ecartis:ecartis:0.129a cpe:/a:ecartis:ecartis:1.0.0_snapshot_2002-01-21 cpe:/a:ecartis:ecartis:1.0.0_snapshot_2002-01-25 cpe:/a:ecartis:ecartis:1.0.0_snapshot_2002-04-27 cpe:/a:ecartis:ecartis:1.0.0_snapshot_2002-05-14 cpe:/a:ecartis:ecartis:1.0.0_snapshot_2002-10-13 cpe:/a:ecartis:ecartis:1.0.0_snapshot_2003-02-27 cpe:/a:ecartis:ecartis:1.0.0_snapshot_2003-03-03 cpe:/a:ecartis:ecartis:1.0.0_snapshot_2003-03-09 cpe:/a:ecartis:ecartis:1.0.0_snapshot_2003-03-12 cpe:/a:ecartis:ecartis:1.0.0_snapshot_2003-03-18 cpe:/a:ecartis:ecartis:1.0.0_snapshot_2003-04-16 cpe:/a:ecartis:ecartis:1.0.0_snapshot_2003-04-17

CVE-2004-0913

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:34.573-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

AUSCERT ESB-2004.0669 DEBIAN DSA-572 BID 11487 XF ecartis-gain-privileges(17809) Unknown vulnerability in ecartis 0.x before 0.129a+1.0.0-snap20020514-1.3 and 1.x before 1.0.0+cvs.20030911-8 allows attackers in the same domain to gain administrator privileges and modify configuration.

cpe:/a:lesstif:lesstif:0.93 cpe:/a:lesstif:lesstif:0.93.12 cpe:/a:lesstif:lesstif:0.93.18 cpe:/a:lesstif:lesstif:0.93.34 cpe:/a:lesstif:lesstif:0.93.36 cpe:/a:lesstif:lesstif:0.93.40 cpe:/a:lesstif:lesstif:0.93.91 cpe:/a:lesstif:lesstif:0.93.94 cpe:/a:lesstif:lesstif:0.93.96 cpe:/a:x.org:x11r6:6.7.0 cpe:/a:x.org:x11r6:6.8 cpe:/a:x.org:x11r6:6.8.1 cpe:/a:xfree86_project:x11r6:3.3 cpe:/a:xfree86_project:x11r6:3.3.2 cpe:/a:xfree86_project:x11r6:3.3.3 cpe:/a:xfree86_project:x11r6:3.3.4 cpe:/a:xfree86_project:x11r6:3.3.5 cpe:/a:xfree86_project:x11r6:3.3.6 cpe:/a:xfree86_project:x11r6:4.0 cpe:/a:xfree86_project:x11r6:4.0.1 cpe:/a:xfree86_project:x11r6:4.0.2.11 cpe:/a:xfree86_project:x11r6:4.0.3 cpe:/a:xfree86_project:x11r6:4.1.0 cpe:/a:xfree86_project:x11r6:4.1.11 cpe:/a:xfree86_project:x11r6:4.1.12 cpe:/a:xfree86_project:x11r6:4.2.0 cpe:/a:xfree86_project:x11r6:4.2.1 cpe:/a:xfree86_project:x11r6:4.2.1::errata cpe:/a:xfree86_project:x11r6:4.3.0 cpe:/o:gentoo:linux cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:redhat:fedora_core:core_3.0 cpe:/o:suse:suse_linux:1.0::desktop cpe:/o:suse:suse_linux:8::enterprise_server cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::enterprise_server cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.2

CVE-2004-0914

2005-01-10T00:00:00.000-05:00

2017-10-10T21:29:37.653-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

REDHAT RHSA-2004:537 DEBIAN DSA-607 GENTOO GLSA-200411-28 GENTOO GLSA-200502-06 GENTOO GLSA-200502-07 FEDORA FEDORA-2004-433 MANDRAKE MDKSA-2004:137 FEDORA FLSA-2006:152803 REDHAT RHSA-2004:610 REDHAT RHSA-2005:004 BID 11694 UBUNTU USN-83-1 UBUNTU USN-83-2 CONFIRM http://www.x.org/pub/X11R6.8.1/patches/README.xorg-681-CAN-2004-0914.patch HP HPSBTU01228 XF libxpm-image-bo(18142) XF libxpm-improper-memory-access(18144) XF libxpm-command-execution(18145) XF libxpm-directory-traversal(18146) XF libxpm-dos(18147) Multiple vulnerabilities in libXpm for 6.8.1 and earlier, as used in XFree86 and other packages, include (1) multiple integer overflows, (2) out-of-bounds memory accesses, (3) directory traversal, (4) shell metacharacter, (5) endless loops, and (6) memory leaks, which could allow remote attackers to obtain sensitive information, cause a denial of service (application crash), or execute arbitrary code via a certain XPM image file. NOTE: it is highly likely that this candidate will be SPLIT into other candidates in the future, per CVE's content decisions.

cpe:/a:viewcvs:viewcvs:0.9.2 cpe:/o:debian:debian_linux:3.0 cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::hppa cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::sparc

CVE-2004-0915

2005-01-10T00:00:00.000-05:00

2017-07-10T21:30:34.730-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov DEBIAN DSA-605 XF viewcvs-repository-weak-security(18369) Multiple unknown vulnerabilities in viewcvs before 0.9.2, when exporting a repository as a tar archive, does not properly implement the hide_cvsroot and forbidden settings, which could allow remote attackers to gain sensitive information.

cpe:/a:cabextract:cabextract:0.2 cpe:/a:cabextract:cabextract:0.6 cpe:/a:cabextract:cabextract:1.0

CVE-2004-0916

2005-01-27T00:00:00.000-05:00

2017-07-10T21:30:34.777-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov DEBIAN DSA-574 CONFIRM http://www.kyz.uklinux.net/cabextract.php#changes BID 11460 XF cabextract-directory-traversal(17766) Directory traversal vulnerability in cabextract before 1.1 allows remote attackers to overwrite arbitrary files via a cabinet file containing .. (dot dot) sequences in a filename.

cpe:/a:vignette:application_portal

CVE-2004-0917

2005-01-27T00:00:00.000-05:00

2017-07-10T21:30:34.840-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov SECTRACK 1011447 ATSTAKE A092804-1 BID 11267 XF vignette-diagnostic-obtain-info(17530) The default installation of Vignette Application Portal installs the diagnostic utility without authentication requirements, which allows remote attackers to gain sensitive information, such as server and OS version, and conduct unauthorized activities via an HTTP request to /diag.

cpe:/a:openpkg:openpkg:2.1 cpe:/a:openpkg:openpkg:2.2 cpe:/a:openpkg:openpkg:current cpe:/a:squid:squid:2.0_patch2 cpe:/a:squid:squid:2.1_patch2 cpe:/a:squid:squid:2.3_.stable4 cpe:/a:squid:squid:2.3_.stable5 cpe:/a:squid:squid:2.4 cpe:/a:squid:squid:2.4_.stable2 cpe:/a:squid:squid:2.4_.stable6 cpe:/a:squid:squid:2.4_.stable7 cpe:/a:squid:squid:2.5_.stable1 cpe:/a:squid:squid:2.5_.stable3 cpe:/a:squid:squid:2.5_.stable4 cpe:/a:squid:squid:2.5_.stable5 cpe:/a:squid:squid:2.5_.stable6 cpe:/a:squid:squid:3.0_pre1 cpe:/a:squid:squid:3.0_pre2 cpe:/a:squid:squid:3.0_pre3 cpe:/o:gentoo:linux cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:trustix:secure_linux:1.5 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1 cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc

CVE-2004-0918

2005-01-27T00:00:00.000-05:00

2017-10-10T21:29:37.733-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SCO SCOSA-2005.16 SUSE SUSE-SR:2008:014 OPENPKG OpenPKG-SA-2004.048 GENTOO GLSA-200410-15 IDEFENSE 20041011 Squid Web Proxy Cache Remote Denial of Service Vulnerability REDHAT RHSA-2004:591 BID 11385 CONFIRM http://www.squid-cache.org/Advisories/SQUID-2004_3.txt CONFIRM http://www.squid-cache.org/Advisories/SQUID-2008_1.txt VUPEN ADV-2008-1969 XF squid-snmp-asnparseheader-dos(17688) FEDORA FEDORA-2008-6045 The asn_parse_header function (asn1.c) in the SNMP module for Squid Web Proxy Cache before 2.4.STABLE7 allows remote attackers to cause a denial of service (server restart) via certain SNMP packets with negative length fields that trigger a memory allocation error.

cpe:/o:freebsd:freebsd:5.0 cpe:/o:freebsd:freebsd:5.0:alpha cpe:/o:freebsd:freebsd:5.0:release_p14 cpe:/o:freebsd:freebsd:5.0:releng cpe:/o:freebsd:freebsd:5.1 cpe:/o:freebsd:freebsd:5.1:alpha cpe:/o:freebsd:freebsd:5.1:release cpe:/o:freebsd:freebsd:5.1:release_p5 cpe:/o:freebsd:freebsd:5.1:releng cpe:/o:freebsd:freebsd:5.2 cpe:/o:freebsd:freebsd:5.2.1:release cpe:/o:freebsd:freebsd:5.2.1:releng

CVE-2004-0919

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:34.967-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov FREEBSD FreeBSD-SA-04:15 CERT-VN VU#969078 BID 11321 XF syscons-consscrshot-info-disclosure(17584) The syscons CONS_SCRSHOT ioctl in FreeBSD 5.x allows local users to read arbitrary kernel memory via (1) negative coordinates or (2) large coordinates.

cpe:/a:symantec:norton_antivirus:2.1::ms_exchange

CVE-2004-0920

2004-11-03T00:00:00.000-05:00

2017-07-10T21:30:35.010-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov IDEFENSE 20041005 Symantec Norton AntiVirus Reserved Device Name Handling Vulnerability MISC http://www.seifried.org/security/advisories/kssa-010.html XF nav-antivirus-security-bypass(17603) Symantec Norton AntiVirus 2004, and earlier versions, allows a virus or other malicious code to avoid detection or cause a denial of service (application crash) using a filename containing an MS-DOS device name.

cpe:/a:apple:quicktime:5.0.2 cpe:/a:apple:quicktime:6.0 cpe:/a:apple:quicktime:6.1 cpe:/a:apple:quicktime:6.5 cpe:/a:apple:quicktime:6.5.1 cpe:/o:apple:mac_os_x:10.2 cpe:/o:apple:mac_os_x:10.2.1 cpe:/o:apple:mac_os_x:10.2.2 cpe:/o:apple:mac_os_x:10.2.3 cpe:/o:apple:mac_os_x:10.2.4 cpe:/o:apple:mac_os_x:10.2.5 cpe:/o:apple:mac_os_x:10.2.6 cpe:/o:apple:mac_os_x:10.2.7 cpe:/o:apple:mac_os_x:10.2.8 cpe:/o:apple:mac_os_x:10.3 cpe:/o:apple:mac_os_x:10.3.1 cpe:/o:apple:mac_os_x:10.3.2 cpe:/o:apple:mac_os_x:10.3.3 cpe:/o:apple:mac_os_x:10.3.4 cpe:/o:apple:mac_os_x:10.3.5 cpe:/o:apple:mac_os_x_server:10.2 cpe:/o:apple:mac_os_x_server:10.2.1 cpe:/o:apple:mac_os_x_server:10.2.2 cpe:/o:apple:mac_os_x_server:10.2.3 cpe:/o:apple:mac_os_x_server:10.2.4 cpe:/o:apple:mac_os_x_server:10.2.5 cpe:/o:apple:mac_os_x_server:10.2.6 cpe:/o:apple:mac_os_x_server:10.2.7 cpe:/o:apple:mac_os_x_server:10.2.8 cpe:/o:apple:mac_os_x_server:10.3 cpe:/o:apple:mac_os_x_server:10.3.1 cpe:/o:apple:mac_os_x_server:10.3.2 cpe:/o:apple:mac_os_x_server:10.3.3 cpe:/o:apple:mac_os_x_server:10.3.4 cpe:/o:apple:mac_os_x_server:10.3.5

CVE-2004-0921

2005-01-27T00:00:00.000-05:00

2008-09-05T16:39:47.623-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

ALLOWS_OTHER_ACCESS

APPLE APPLE-SA-2004-09-30 BID 11322 AFP Server on Mac OS X 10.3.x to 10.3.5, when a guest has mounted an AFP volume, allows the guest to "terminate authenticated user mounts" via modified SessionDestroy packets.

CVE-2004-0922

2005-01-27T00:00:00.000-05:00

2008-09-05T16:39:47.857-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

APPLE APPLE-SA-2004-09-30 BID 11322 AFP Server on Mac OS X 10.3.x to 10.3.5, under certain conditions, does not properly set the guest group ID, which causes AFP to change a write-only AFP Drop Box to be read-write when the Drop Box is on a share that is mounted by a guest, which allows attackers to read the Drop Box.

CVE-2004-0923

2005-01-27T00:00:00.000-05:00

2017-10-10T21:29:37.810-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov APPLE APPLE-SA-2004-09-30 CIAC P-002 DEBIAN DSA-566 CERT-VN VU#557062 MANDRAKE MDKSA-2004:116 REDHAT RHSA-2004:543 BID 11324 XF cups-password-disclosure(17593) CUPS 1.1.20 and earlier records authentication information for a device URI in the error_log file, which allows local users to obtain user names and passwords.

CVE-2004-0924

2005-01-27T00:00:00.000-05:00

2008-09-05T16:39:48.390-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

APPLE APPLE-SA-2004-09-30 BID 11322 NetInfo Manager on Mac OS X 10.3.x through 10.3.5, after an initial root login, reports the root account as being disabled, even when it has not.

cpe:/o:apple:mac_os_x:10.3 cpe:/o:apple:mac_os_x:10.3.1 cpe:/o:apple:mac_os_x:10.3.2 cpe:/o:apple:mac_os_x:10.3.3 cpe:/o:apple:mac_os_x:10.3.4 cpe:/o:apple:mac_os_x:10.3.5 cpe:/o:apple:mac_os_x_server:10.3 cpe:/o:apple:mac_os_x_server:10.3.1 cpe:/o:apple:mac_os_x_server:10.3.2 cpe:/o:apple:mac_os_x_server:10.3.3 cpe:/o:apple:mac_os_x_server:10.3.4 cpe:/o:apple:mac_os_x_server:10.3.5

CVE-2004-0925

2005-01-27T00:00:00.000-05:00

2008-09-10T15:28:16.257-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

APPLE APPLE-SA-2004-09-30 Postfix on Mac OS X 10.3.x through 10.3.5, with SMTPD AUTH enabled, does not properly clear the username between authentication attempts, which allows users with the longest username to prevent other valid users from being able to authenticate.

CVE-2004-0926

2005-01-27T00:00:00.000-05:00

2008-09-05T16:39:48.843-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2004-09-30 APPLE APPLE-SA-2004-10-27 BID 11322 Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 may allow remote attackers to execute arbitrary code via a certain BMP image.

CVE-2004-0927

2005-01-27T00:00:00.000-05:00

2008-09-05T16:39:49.123-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

APPLE APPLE-SA-2004-09-30 BID 11322 ServerAdmin in Mac OS X 10.2.8 through 10.3.5 uses the same example self-signed certificate on each system, which allows remote attackers to decrypt sessions.

cpe:/a:hitachi:cosminexus_enterprise:01_01_1::enterprise cpe:/a:hitachi:cosminexus_enterprise:01_01_1::standard cpe:/a:hitachi:cosminexus_enterprise:01_02_2::enterprise cpe:/a:hitachi:cosminexus_enterprise:01_02_2::standard cpe:/a:hitachi:cosminexus_server:web_01-01_1 cpe:/a:hitachi:cosminexus_server:web_01-01_2 cpe:/a:macromedia:coldfusion:6.0 cpe:/a:macromedia:coldfusion:6.1 cpe:/a:macromedia:jrun:3.0 cpe:/a:macromedia:jrun:3.1 cpe:/a:macromedia:jrun:4.0

CVE-2004-0928

2004-10-05T00:00:00.000-04:00

2017-07-10T21:30:35.137-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20040923 New Macromedia Security Zone Bulletins Posted IDEFENSE 20041005 ColdFusion MX 6.1 on IIS File Contents Disclosure CERT-VN VU#977440 CONFIRM http://www.macromedia.com/devnet/security/security_zone/mpsb04-08.html CONFIRM http://www.macromedia.com/devnet/security/security_zone/mpsb04-09.html BID 11245 XF coldfusion-jrun-restriction-bypass(17484) The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE allows remote attackers to bypass authentication and view source files, such as .asp, .pl, and .php files, via an HTTP request that ends in ";.cfm".

cpe:/a:libtiff:libtiff:3.6.1 cpe:/o:suse:suse_linux:1.0::desktop cpe:/o:suse:suse_linux:8::enterprise_server cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::enterprise_server cpe:/o:suse:suse_linux:9.1

CVE-2004-0929

2005-01-27T00:00:00.000-05:00

2017-07-10T21:30:35.200-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20041022 Novell SuSe Linux LibTIFF Heap Overflow Vulnerability CERT-VN VU#129910 SUSE SUSE-SA:2004:038 XF libtiff-ojpegvsetfield-bo(17843) Heap-based buffer overflow in the OJPEGVSetField function in tif_ojpeg.c for libtiff 3.6.1 and earlier, when compiled with the OJPEG_SUPPORT (old JPEG support) option, allows remote attackers to execute arbitrary code via a malformed TIFF image.

cpe:/a:samba:samba:3.0.0 cpe:/a:samba:samba:3.0.3 cpe:/a:samba:samba:3.0.4 cpe:/a:samba:samba:3.0.5 cpe:/a:samba:samba:3.0.6 cpe:/a:samba:samba:3.0.7 cpe:/a:sgi:samba:3.0::irix cpe:/a:sgi:samba:3.0.1::irix cpe:/a:sgi:samba:3.0.2::irix cpe:/a:sgi:samba:3.0.3::irix cpe:/a:sgi:samba:3.0.4::irix cpe:/a:sgi:samba:3.0.5::irix cpe:/a:sgi:samba:3.0.6::irix cpe:/a:sgi:samba:3.0.7::irix cpe:/o:conectiva:linux:10.0 cpe:/o:gentoo:linux cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::advanced_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:2.1::workstation_ia64 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:redhat:fedora_core:core_3.0 cpe:/o:redhat:linux_advanced_workstation:2.1::ia64 cpe:/o:redhat:linux_advanced_workstation:2.1::itanium_processor

CVE-2004-0930

2005-01-27T00:00:00.000-05:00

2017-10-10T21:29:37.903-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SCO SCOSA-2005.17 SGI 20041201-01-P CONECTIVA CLA-2004:899 APPLE APPLE-SA-2005-03-21 BUGTRAQ 20041108 [SECURITY] CAN-2004-0930: Potential Remote Denial of Service Vulnerability OPENPKG OpenPKG-SA-2004.054 SUNALERT 101783 GENTOO GLSA 200411-21 IDEFENSE 20041108 Samba SMBD Remote Denial of Service Vulnerability MANDRAKE MDKSA-2004:131 SUSE SUSE-SA:2004:040 BID 11624 XF samba-msfnmatch-dos(17987) UBUNTU USN-22-1 The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request that contains multiple * (wildcard) characters.

cpe:/a:mysql:maxdb:7.5.00.08 cpe:/a:mysql:maxdb:7.5.00.11 cpe:/a:mysql:maxdb:7.5.00.12 cpe:/a:mysql:maxdb:7.5.00.14 cpe:/a:mysql:maxdb:7.5.00.15 cpe:/a:mysql:maxdb:7.5.00.16

CVE-2004-0931

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:35.307-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov IDEFENSE 20041006 MySQL MaxDB Web Agent WebDBMServer Name Denial of Service Vulnerability BID 11346 XF maxdb-isascii7dos(17633) MySQL MaxDB before 7.5.00.18 allows remote attackers to cause a denial of service (crash) via an HTTP request to webdbm with high ASCII values in the Server field, which triggers an assert error in the IsAscii7 function.

cpe:/a:archive_zip:archive_zip:1.13 cpe:/a:ca:brightstor_arcserve_backup:11.1 cpe:/a:ca:etrust_antivirus:7.0 cpe:/a:ca:etrust_antivirus:7.0_sp2 cpe:/a:ca:etrust_antivirus:7.1 cpe:/a:ca:etrust_antivirus_gateway:7.0 cpe:/a:ca:etrust_antivirus_gateway:7.1 cpe:/a:ca:etrust_ez_antivirus:6.1 cpe:/a:ca:etrust_ez_antivirus:6.2 cpe:/a:ca:etrust_ez_antivirus:6.3 cpe:/a:ca:etrust_ez_armor:2.0 cpe:/a:ca:etrust_ez_armor:2.3 cpe:/a:ca:etrust_ez_armor:2.4 cpe:/a:ca:etrust_intrusion_detection:1.4.1.13 cpe:/a:ca:etrust_intrusion_detection:1.4.5 cpe:/a:ca:etrust_intrusion_detection:1.5 cpe:/a:ca:etrust_secure_content_manager:1.0 cpe:/a:ca:etrust_secure_content_manager:1.0:sp1 cpe:/a:ca:etrust_secure_content_manager:1.1 cpe:/a:ca:inoculateit:6.0 cpe:/a:eset_software:nod32_antivirus:1.0.11 cpe:/a:eset_software:nod32_antivirus:1.0.12 cpe:/a:eset_software:nod32_antivirus:1.0.13 cpe:/a:kaspersky_lab:kaspersky_anti-virus:3.0 cpe:/a:kaspersky_lab:kaspersky_anti-virus:4.0 cpe:/a:kaspersky_lab:kaspersky_anti-virus:5.0 cpe:/a:mcafee:antivirus_engine:4.3.20 cpe:/a:rav_antivirus:rav_antivirus_desktop:8.6 cpe:/a:rav_antivirus:rav_antivirus_for_file_servers:1.0 cpe:/a:rav_antivirus:rav_antivirus_for_mail_servers:8.4.2 cpe:/a:sophos:sophos_anti-virus:3.4.6 cpe:/a:sophos:sophos_anti-virus:3.78 cpe:/a:sophos:sophos_anti-virus:3.78d cpe:/a:sophos:sophos_anti-virus:3.79 cpe:/a:sophos:sophos_anti-virus:3.80 cpe:/a:sophos:sophos_anti-virus:3.81 cpe:/a:sophos:sophos_anti-virus:3.82 cpe:/a:sophos:sophos_anti-virus:3.83 cpe:/a:sophos:sophos_anti-virus:3.84 cpe:/a:sophos:sophos_anti-virus:3.85 cpe:/a:sophos:sophos_anti-virus:3.86 cpe:/a:sophos:sophos_puremessage_anti-virus:4.6 cpe:/a:sophos:sophos_small_business_suite:1.0 cpe:/o:gentoo:linux cpe:/o:gentoo:linux:1.4 cpe:/o:mandrakesoft:mandrake_linux:10.1 cpe:/o:mandrakesoft:mandrake_linux:10.1::x86_64 cpe:/o:suse:suse_linux:9.2

CVE-2004-0932

2005-01-27T00:00:00.000-05:00

2017-07-10T21:30:35.370-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

IDEFENSE 20041018 Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability BID 11448 XF antivirus-zip-protection-bypass(17761) McAfee Anti-Virus Engine DATS drivers before 4398 released on Oct 13th 2004 and DATS Driver before 4397 October 6th 2004 allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

CVE-2004-0933

2005-01-27T00:00:00.000-05:00

2017-07-10T21:30:35.433-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://supportconnectw.ca.com/public/ca_common_docs/arclib_vuln.asp IDEFENSE 20041018 Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability BID 11448 XF antivirus-zip-protection-bypass(17761) Computer Associates (CA) InoculateIT 6.0, eTrust Antivirus r6.0 through r7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, EZ-Armor 2.0 through 2.4, and EZ-Antivirus 6.1 through 6.3 allow remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

CVE-2004-0934

2005-01-27T00:00:00.000-05:00

2017-07-10T21:30:35.497-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

IDEFENSE 20041018 Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability CERT-VN VU#968818 BID 11448 XF antivirus-zip-protection-bypass(17761) Kaspersky 3.x to 4.x allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

CVE-2004-0935

2005-01-27T00:00:00.000-05:00

2017-07-10T21:30:35.573-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

IDEFENSE 20041018 Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability CERT-VN VU#968818 BID 11448 XF antivirus-zip-protection-bypass(17761) Eset Anti-Virus before 1.020 (16th September 2004) allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

CVE-2004-0936

2005-01-27T00:00:00.000-05:00

2017-07-10T21:30:35.637-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

IDEFENSE 20041018 Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability CERT-VN VU#968818 BID 11448 XF antivirus-zip-protection-bypass(17761) RAV antivirus allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

CVE-2004-0937

2005-02-09T00:00:00.000-05:00

2017-07-10T21:30:35.700-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

IDEFENSE 20041018 Multiple Vendor Anti-Virus Software Detection Evasion Vulnerability CERT-VN VU#968818 BID 11448 XF antivirus-zip-protection-bypass(17761) Sophos Anti-Virus before 3.87.0, and Sophos Anti-Virus for Windows 95, 98, and Me before 3.88.0, allows remote attackers to bypass antivirus protection via a compressed file with both local and global headers set to zero, which does not prevent the compressed file from being opened on a target system.

cpe:/a:freeradius:freeradius:1.0.1

CVE-2004-0938

2004-11-03T00:00:00.000-05:00

2017-10-10T21:29:37.967-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov GENTOO GLSA-200409-29 CERT-VN VU#541574 BID 11222 XF freeradius-dos(17440) FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (server crash) by sending an Ascend-Send-Secret attribute without the required leading packet.

cpe:/a:neoteris:instant_virtual_extranet

CVE-2004-0939

2005-02-09T00:00:00.000-05:00

2017-07-10T21:30:35.807-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20041006 [GoSecure Advisory] Neoteris IVE Vulnerability SECTRACK 1011552 MISC http://www.gosecure.ca/SecInfo/gosecure-2004-10.txt XF juniper-netscreen-password-bruteforce(17629) changepassword.cgi in Neoteris Instant Virtual Extranet (IVE) 3.x and 4.x, with LDAP authentication or NT domain authentication enabled, does not limit the number of times a bad password can be entered, which allows remote attackers to guess passwords via a brute force attack.

CVE-2004-0940

2005-02-09T00:00:00.000-05:00

2017-07-10T21:30:35.887-04:00

6.9

LOCAL

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

OPENPKG OpenPKG-SA-2004.047 SECTRACK 1011783 SUNALERT 102197 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm CONFIRM http://www.apacheweek.com/features/security-13 DEBIAN DSA-594 MANDRAKE MDKSA-2004:134 REDHAT RHSA-2004:600 REDHAT RHSA-2005:816 BID 11471 VUPEN ADV-2006-0789 XF apache-modinclude-bo(17785) Buffer overflow in the get_tag function in mod_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute arbitrary code as the apache user via SSI (XSSI) documents that trigger a length calculation error.

cpe:/a:gd_graphics_library:gdlib:1.8.4 cpe:/a:gd_graphics_library:gdlib:2.0.1 cpe:/a:gd_graphics_library:gdlib:2.0.20 cpe:/a:gd_graphics_library:gdlib:2.0.21 cpe:/a:gd_graphics_library:gdlib:2.0.22 cpe:/a:gd_graphics_library:gdlib:2.0.23 cpe:/a:gd_graphics_library:gdlib:2.0.26 cpe:/a:gd_graphics_library:gdlib:2.0.27 cpe:/a:gd_graphics_library:gdlib:2.0.28 cpe:/a:gd_graphics_library:gdlib:2.0.33 cpe:/o:trustix:secure_linux:1.5 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1 cpe:/o:trustix:secure_linux:2.2

CVE-2004-0941

2005-02-09T00:00:00.000-05:00

2018-05-02T21:29:26.740-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CIAC P-071 DEBIAN DSA-601 MANDRIVA MDKSA-2006:113 MANDRIVA MDKSA-2006:114 MANDRIVA MDKSA-2006:122 REDHAT RHSA-2004:638 REDHAT RHSA-2006:0194 BID 11663 TRUSTIX 2004-0058 XF gd-graphics-gdmalloc-bo(18048) UBUNTU USN-25-1 UBUNTU USN-33-1 Multiple buffer overflows in the gd graphics library (libgd) 2.0.21 and earlier may allow remote attackers to execute arbitrary code via malformed image files that trigger the overflows due to improper calls to the gdMalloc function, a different set of vulnerabilities than CVE-2004-0990.

cpe:/a:apache:http_server:2.0.52

CVE-2004-0942

2005-02-09T00:00:00.000-05:00

2017-10-10T21:29:38.060-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov APPLE APPLE-SA-2005-08-17 APPLE APPLE-SA-2005-08-15 FULLDISC 20041101 DoS in Apache 2.0.52 ? HP SSRT4876 SUNALERT 102198 CONFIRM http://support.avaya.com/elmodocs2/security/ASA-2006-081.htm MANDRAKE MDKSA-2004:135 REDHAT RHSA-2004:562 TRUSTIX 2004-0061 VUPEN ADV-2006-0789 HP HPSBUX01123 XF apache-http-get-dos(17930) MLIST [httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html MLIST [httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html Apache webserver 2.0.52 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an HTTP GET request with a MIME header containing multiple lines with a large number of space characters.

CVE-2004-0943

2004-12-31T00:00:00.000-05:00

2008-09-10T15:28:20.087-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.

CVE-2004-0944

2004-02-28T00:00:00.000-05:00

2008-09-05T16:39:52.873-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov

2005-06-17T13:56:00.000-04:00

MISC http://www.corsaire.com/advisories/c040817-002.txt CONFIRM http://www.mitel.com/DocController?documentId=14223 MISC http://www.niscc.gov.uk/niscc/docs/re-20050228-00178.pdf?lang=en The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 generates easily predictable web session IDs, which allows remote attackers to hijack other sessions via the parentsessionid cookie.

cpe:/h:mitel:mitel_3300_integrated_communication_platform

CVE-2004-0945

2005-02-28T00:00:00.000-05:00

2008-09-05T16:39:53.030-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-17T14:10:00.000-04:00

MISC http://www.corsaire.com/advisories/c040817-003.txt CONFIRM http://www.mitel.com/DocController?documentId=14223 MISC http://www.niscc.gov.uk/niscc/docs/re-20050228-00178.pdf?lang=en The web management interface for Mitel 3300 Integrated Communications Platform (ICP) before 4.2.2.11 allows remote authenticated users to cause a denial of service (resource exhaustion) via a large number of active sessions, which exceeds ICP's maximum.

cpe:/a:nfs:nfs-utils:1.0 cpe:/a:nfs:nfs-utils:1.0.1 cpe:/a:nfs:nfs-utils:1.0.2 cpe:/a:nfs:nfs-utils:1.0.3 cpe:/a:nfs:nfs-utils:1.0.4 cpe:/a:nfs:nfs-utils:1.0.6 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux_desktop:3.0

CVE-2004-0946

2005-01-10T00:00:00.000-05:00

2018-10-19T11:30:30.973-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://bugs.gentoo.org/show_bug.cgi?id=72113 GENTOO GLSA-200412-08 CERT-VN VU#698302 MANDRAKE MDKSA-2005:005 REDHAT RHSA-2004:583 REDHAT RHSA-2005:014 FEDORA FLSA-2006:138098 BID 11911 XF nfsutils-getquotainfo-bo(18455) rquotad in nfs-utils (rquota_server.c) before 1.0.6-r6 on 64-bit architectures does not properly perform an integer conversion, which leads to a stack-based buffer overflow and allows remote attackers to execute arbitrary code via a crafted NFS request.

cpe:/a:arj_software_inc.:unarj:2.62 cpe:/a:arj_software_inc.:unarj:2.63_a cpe:/a:arj_software_inc.:unarj:2.64 cpe:/a:arj_software_inc.:unarj:2.65 cpe:/o:gentoo:linux cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.2

CVE-2004-0947

2005-02-09T00:00:00.000-05:00

2017-07-10T21:30:36.137-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FEDORA FLSA:2272 DEBIAN DSA-652 GENTOO GLSA-200411-29 REDHAT RHSA-2005:007 BID 11665 XF unarj-longfilename-bo(18044) Buffer overflow in unarj before 2.63a-r2 allows remote attackers to execute arbitrary code via an arj archive that contains long filenames.

CVE-2004-0948

2004-12-31T00:00:00.000-05:00

2008-09-10T15:28:21.633-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. It was a duplicate assignment before public disclosure. Notes: none.

cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.4.0:test1 cpe:/o:linux:linux_kernel:2.4.0:test10 cpe:/o:linux:linux_kernel:2.4.0:test11 cpe:/o:linux:linux_kernel:2.4.0:test12 cpe:/o:linux:linux_kernel:2.4.0:test2 cpe:/o:linux:linux_kernel:2.4.0:test3 cpe:/o:linux:linux_kernel:2.4.0:test4 cpe:/o:linux:linux_kernel:2.4.0:test5 cpe:/o:linux:linux_kernel:2.4.0:test6 cpe:/o:linux:linux_kernel:2.4.0:test7 cpe:/o:linux:linux_kernel:2.4.0:test8 cpe:/o:linux:linux_kernel:2.4.0:test9 cpe:/o:linux:linux_kernel:2.4.1 cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:linux:linux_kernel:2.4.3 cpe:/o:linux:linux_kernel:2.4.4 cpe:/o:linux:linux_kernel:2.4.5 cpe:/o:linux:linux_kernel:2.4.6 cpe:/o:linux:linux_kernel:2.4.7 cpe:/o:linux:linux_kernel:2.4.8 cpe:/o:linux:linux_kernel:2.4.9 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.18::x86 cpe:/o:linux:linux_kernel:2.4.18:pre1 cpe:/o:linux:linux_kernel:2.4.18:pre2 cpe:/o:linux:linux_kernel:2.4.18:pre3 cpe:/o:linux:linux_kernel:2.4.18:pre4 cpe:/o:linux:linux_kernel:2.4.18:pre5 cpe:/o:linux:linux_kernel:2.4.18:pre6 cpe:/o:linux:linux_kernel:2.4.18:pre7 cpe:/o:linux:linux_kernel:2.4.18:pre8 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.19:pre1 cpe:/o:linux:linux_kernel:2.4.19:pre2 cpe:/o:linux:linux_kernel:2.4.19:pre3 cpe:/o:linux:linux_kernel:2.4.19:pre4 cpe:/o:linux:linux_kernel:2.4.19:pre5 cpe:/o:linux:linux_kernel:2.4.19:pre6 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.21:pre1 cpe:/o:linux:linux_kernel:2.4.21:pre4 cpe:/o:linux:linux_kernel:2.4.21:pre7 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.23:pre9 cpe:/o:linux:linux_kernel:2.4.23_ow2 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.24_ow1 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.4.26 cpe:/o:linux:linux_kernel:2.4.27 cpe:/o:linux:linux_kernel:2.4.27:pre1 cpe:/o:linux:linux_kernel:2.4.27:pre2 cpe:/o:linux:linux_kernel:2.4.27:pre3 cpe:/o:linux:linux_kernel:2.4.27:pre4 cpe:/o:linux:linux_kernel:2.4.27:pre5 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.0:test1 cpe:/o:linux:linux_kernel:2.6.0:test10 cpe:/o:linux:linux_kernel:2.6.0:test11 cpe:/o:linux:linux_kernel:2.6.0:test2 cpe:/o:linux:linux_kernel:2.6.0:test3 cpe:/o:linux:linux_kernel:2.6.0:test4 cpe:/o:linux:linux_kernel:2.6.0:test5 cpe:/o:linux:linux_kernel:2.6.0:test6 cpe:/o:linux:linux_kernel:2.6.0:test7 cpe:/o:linux:linux_kernel:2.6.0:test8 cpe:/o:linux:linux_kernel:2.6.0:test9 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.6:rc1 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.7:rc1 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.8:rc1 cpe:/o:linux:linux_kernel:2.6.8:rc2 cpe:/o:linux:linux_kernel:2.6.8:rc3 cpe:/o:linux:linux_kernel:2.6.9:2.6.20 cpe:/o:linux:linux_kernel:2.6_test9_cvs cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::advanced_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:2.1::workstation_ia64 cpe:/o:redhat:enterprise_linux:3.0::advanced_servers cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:redhat:fedora_core:core_3.0 cpe:/o:redhat:linux_advanced_workstation:2.1::ia64 cpe:/o:redhat:linux_advanced_workstation:2.1::itanium_processor cpe:/o:suse:suse_linux:1.0::desktop cpe:/o:suse:suse_linux:8::enterprise_server cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::enterprise_server cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.2 cpe:/o:trustix:secure_linux:1.5 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1 cpe:/o:trustix:secure_linux:2.2 cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc

CVE-2004-0949

2005-01-10T00:00:00.000-05:00

2017-10-10T21:29:38.310-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20041117 Advisory 14/2004: Linux 2.x smbfs multiple remote vulnerabilities MISC http://security.e-matters.de/advisories/142004.html DEBIAN DSA-1067 DEBIAN DSA-1069 DEBIAN DSA-1070 DEBIAN DSA-1082 MANDRAKE MDKSA-2005:022 REDHAT RHSA-2004:504 REDHAT RHSA-2004:505 REDHAT RHSA-2004:537 BID 11695 TRUSTIX 2004-0061 FEDORA FLSA:2336 XF linux-smbrecvtrans2-memory-leak(18137) UBUNTU USN-30-1 The smb_recv_trans2 function call in the samba filesystem (smbfs) in Linux kernel 2.4 and 2.6 does not properly handle the re-assembly of fragmented packets correctly, which could allow remote samba servers to (1) read arbitrary kernel information or (2) raise a counter value to an arbitrary number by sending the first part of the fragmented packet multiple times.

cpe:/a:danware_data:netop:6.0 cpe:/a:danware_data:netop:6.50 cpe:/a:danware_data:netop:7.0.1_build2002-01-29 cpe:/a:danware_data:netop:7.50_build2003-08-04 cpe:/a:danware_data:netop:7.60_build2003-06-24

CVE-2004-0950

2005-02-09T00:00:00.000-05:00

2017-07-10T21:30:36.277-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20041119 Corsaire Security Advisory - Danware NetOp Host multiple information disclosure issues MISC http://www.corsaire.com/advisories/c040619-001.txt BID 11710 XF danware-helo-obtain-information(18171) NetOp Host before 7.65 build 2004278 allows remote attackers to obtain sensitive hostname, username and local IP address information via (1) a NetOp HELO request, or (2) when responses are disabled, a "custom" HELO request.

cpe:/a:hp:ignite-ux:c.6.2.241

CVE-2004-0951

2004-12-31T00:00:00.000-05:00

2018-10-30T12:25:21.823-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

SECTRACK 1014711 MISC http://www.corsaire.com/advisories/c041123-001.txt BID 14568 XF hpigniteux-makerecovery-bypass-security(21858) The make_recovery command for the TFTP server in HP Ignite-UX before C.6.2.241 makes a copy of the password file in the TFTP directory tree, which allows remote attackers to obtain sensitive information.

cpe:/o:hp:hp-ux:11.00 cpe:/o:hp:hp-ux:11.11 cpe:/o:hp:hp-ux:11.22 cpe:/o:hp:hp-ux:11.23::ia64_64-bit

CVE-2004-0952

2004-12-31T00:00:00.000-05:00

2017-10-10T21:29:38.387-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20050816 Corsaire Security Advisory: HP Ignite-UX filesystem permissions issue HP SSRT4874 SECTRACK 1014711 XF hpigniteux-addnewclient-gain-access(21857) HP-UX B.11.00 through B.11.23, when running Ignite-UX and using the add_new_client command, causes the TFTP server to set world-writable permissions on part of the directory tree, which allows remote attackers to modify data or cause disk consumption.

cpe:/a:jabber_software_foundation:jabber_server:2.0

CVE-2004-0953

2005-01-10T00:00:00.000-05:00

2017-07-10T21:30:36.450-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20041124 Jabberd2.x remote BuffJabberd2.x remote Buffer Overflowser Overflows BUGTRAQ 20041124 Jabberd2.x remote BuffJabberd2.x remote Buffer Overflowser Overflows BID 11741 XF jabberd2-c2s-bo(18238) Buffer overflow in the C2S module in the open source Jabber 2.x server (Jabberd) allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long username.

CVE-2004-0954

2004-12-23T00:00:00.000-05:00

2008-09-10T15:28:22.290-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-0597. Reason: This candidate is a reservation duplicate of CVE-2004-0597. Notes: All CVE users should reference CVE-2004-0597 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVE-2004-0955

2004-12-23T00:00:00.000-05:00

2008-09-10T15:28:22.570-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-0599. Reason: This candidate is a reservation duplicate of CVE-2004-0599 (the first item listed in that candidate). Notes: All CVE users should reference CVE-2004-0599 instead of this candidate. All references and descriptions have been removed from this candidate to prevent accidental usage.

cpe:/a:mysql:mysql:4.0.20 cpe:/a:oracle:mysql:4.0.0 cpe:/a:oracle:mysql:4.0.1 cpe:/a:oracle:mysql:4.0.2 cpe:/a:oracle:mysql:4.0.3 cpe:/a:oracle:mysql:4.0.4 cpe:/a:oracle:mysql:4.0.5 cpe:/a:oracle:mysql:4.0.5a cpe:/a:oracle:mysql:4.0.6 cpe:/a:oracle:mysql:4.0.7 cpe:/a:oracle:mysql:4.0.7:gamma cpe:/a:oracle:mysql:4.0.8 cpe:/a:oracle:mysql:4.0.8:gamma cpe:/a:oracle:mysql:4.0.9 cpe:/a:oracle:mysql:4.0.9:gamma cpe:/a:oracle:mysql:4.0.10 cpe:/a:oracle:mysql:4.0.11 cpe:/a:oracle:mysql:4.0.11:gamma cpe:/a:oracle:mysql:4.0.12 cpe:/a:oracle:mysql:4.0.13 cpe:/a:oracle:mysql:4.0.14 cpe:/a:oracle:mysql:4.0.15 cpe:/a:oracle:mysql:4.0.18 cpe:/o:suse:suse_linux:8.0 cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.2 cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc

CVE-2004-0956

2005-01-10T00:00:00.000-05:00

2019-10-07T12:42:32.200-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bugs.mysql.com/bug.php?id=3870 CONFIRM http://lists.mysql.com/packagers/202 GENTOO GLSA-200410-22 SUSE SUSE-SR:2004:001 TRUSTIX 2004-0054 XF mysql-match-against-dos(17768) MySQL before 4.0.20 allows remote attackers to cause a denial of service (application crash) via a MATCH AGAINST query with an opening double quote but no closing double quote.

cpe:/a:mysql:mysql:4.0.20 cpe:/a:openpkg:openpkg:2.1 cpe:/a:openpkg:openpkg:2.2 cpe:/a:openpkg:openpkg:current cpe:/a:oracle:mysql:3.20 cpe:/a:oracle:mysql:3.20.32a cpe:/a:oracle:mysql:3.21 cpe:/a:oracle:mysql:3.22 cpe:/a:oracle:mysql:3.22.26 cpe:/a:oracle:mysql:3.22.27 cpe:/a:oracle:mysql:3.22.28 cpe:/a:oracle:mysql:3.22.29 cpe:/a:oracle:mysql:3.22.30 cpe:/a:oracle:mysql:3.22.32 cpe:/a:oracle:mysql:3.23 cpe:/a:oracle:mysql:3.23.2 cpe:/a:oracle:mysql:3.23.3 cpe:/a:oracle:mysql:3.23.4 cpe:/a:oracle:mysql:3.23.5 cpe:/a:oracle:mysql:3.23.8 cpe:/a:oracle:mysql:3.23.9 cpe:/a:oracle:mysql:3.23.10 cpe:/a:oracle:mysql:3.23.22 cpe:/a:oracle:mysql:3.23.23 cpe:/a:oracle:mysql:3.23.24 cpe:/a:oracle:mysql:3.23.25 cpe:/a:oracle:mysql:3.23.26 cpe:/a:oracle:mysql:3.23.27 cpe:/a:oracle:mysql:3.23.28 cpe:/a:oracle:mysql:3.23.28:gamma cpe:/a:oracle:mysql:3.23.29 cpe:/a:oracle:mysql:3.23.30 cpe:/a:oracle:mysql:3.23.31 cpe:/a:oracle:mysql:3.23.32 cpe:/a:oracle:mysql:3.23.33 cpe:/a:oracle:mysql:3.23.34 cpe:/a:oracle:mysql:3.23.36 cpe:/a:oracle:mysql:3.23.37 cpe:/a:oracle:mysql:3.23.38 cpe:/a:oracle:mysql:3.23.39 cpe:/a:oracle:mysql:3.23.40 cpe:/a:oracle:mysql:3.23.41 cpe:/a:oracle:mysql:3.23.42 cpe:/a:oracle:mysql:3.23.43 cpe:/a:oracle:mysql:3.23.44 cpe:/a:oracle:mysql:3.23.45 cpe:/a:oracle:mysql:3.23.46 cpe:/a:oracle:mysql:3.23.47 cpe:/a:oracle:mysql:3.23.48 cpe:/a:oracle:mysql:3.23.49 cpe:/a:oracle:mysql:3.23.50 cpe:/a:oracle:mysql:3.23.51 cpe:/a:oracle:mysql:3.23.52 cpe:/a:oracle:mysql:3.23.53 cpe:/a:oracle:mysql:3.23.53a cpe:/a:oracle:mysql:3.23.54 cpe:/a:oracle:mysql:3.23.54a cpe:/a:oracle:mysql:3.23.55 cpe:/a:oracle:mysql:3.23.56 cpe:/a:oracle:mysql:3.23.58 cpe:/a:oracle:mysql:3.23.59 cpe:/a:oracle:mysql:4.0.0 cpe:/a:oracle:mysql:4.0.1 cpe:/a:oracle:mysql:4.0.2 cpe:/a:oracle:mysql:4.0.3 cpe:/a:oracle:mysql:4.0.4 cpe:/a:oracle:mysql:4.0.5 cpe:/a:oracle:mysql:4.0.5a cpe:/a:oracle:mysql:4.0.6 cpe:/a:oracle:mysql:4.0.7 cpe:/a:oracle:mysql:4.0.7:gamma cpe:/a:oracle:mysql:4.0.8 cpe:/a:oracle:mysql:4.0.8:gamma cpe:/a:oracle:mysql:4.0.9 cpe:/a:oracle:mysql:4.0.9:gamma cpe:/a:oracle:mysql:4.0.10 cpe:/a:oracle:mysql:4.0.11 cpe:/a:oracle:mysql:4.0.11:gamma cpe:/a:oracle:mysql:4.0.12 cpe:/a:oracle:mysql:4.0.13 cpe:/a:oracle:mysql:4.0.14 cpe:/a:oracle:mysql:4.0.15 cpe:/a:oracle:mysql:4.0.18 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:suse:suse_linux:8.0 cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.2 cpe:/o:trustix:secure_linux:1.5 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1 cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc

CVE-2004-0957

2005-02-09T00:00:00.000-05:00

2019-10-07T12:42:32.200-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONECTIVA CLA-2005:947 CIAC P-018 DEBIAN DSA-707 MANDRAKE MDKSA-2005:070 REDHAT RHSA-2004:597 REDHAT RHSA-2004:611 XF mysql-underscore-gain-priv(17783) UBUNTU USN-32-1 Unknown vulnerability in MySQL 3.23.58 and earlier, when a local user has privileges for a database whose name includes a "_" (underscore), grants privileges to other databases that have similar names, which can allow the user to conduct unauthorized activities.

cpe:/a:php:php:5.0.2

CVE-2004-0958

2004-11-03T00:00:00.000-05:00

2017-10-10T21:29:38.450-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov VULNWATCH 20040915 [VulnWatch] PHP Vulnerability N. 1 BUGTRAQ 20040915 PHP Vulnerability N. 1 SECTRACK 1011279 REDHAT RHSA-2004:687 FEDORA FLSA:2344 XF php-phpinfo-disclose-memory(17393) php_variables.c in PHP before 5.0.2 allows remote attackers to read sensitive memory contents via (1) GET, (2) POST, or (3) COOKIE GPC variables that end in an open bracket character, which causes PHP to calculate an incorrect string length.

cpe:/a:php:php:5.0.2

CVE-2004-0959

2004-11-03T00:00:00.000-05:00

2017-10-10T21:29:38.513-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov VULNWATCH 20040915 Php Vulnerability N. 2 BUGTRAQ 20040915 Php Vulnerability N. 2 SECTRACK 1011307 REDHAT RHSA-2004:687 FEDORA FLSA:2344 XF php-mime-array-execute-code(17392) rfc1867.c in PHP before 5.0.2 allows local users to upload files to arbitrary locations via a PHP script with a certain MIME header that causes the "$_FILES" array to be modified.

cpe:/a:freeradius:freeradius:0.2 cpe:/a:freeradius:freeradius:0.3 cpe:/a:freeradius:freeradius:0.4 cpe:/a:freeradius:freeradius:0.5 cpe:/a:freeradius:freeradius:0.8 cpe:/a:freeradius:freeradius:0.8.1 cpe:/a:freeradius:freeradius:0.9 cpe:/a:freeradius:freeradius:0.9.1 cpe:/a:freeradius:freeradius:0.9.2 cpe:/a:freeradius:freeradius:0.9.3 cpe:/a:freeradius:freeradius:1.0.0 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:fedora_core:core_2.0

CVE-2004-0960

2005-02-09T00:00:00.000-05:00

2017-10-10T21:29:38.577-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov GENTOO GLSA-200409-29 CERT-VN VU#541574 BID 11222 XF freeradius-dos(17440) FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (core dump) via malformed USR vendor-specific attributes (VSA) that cause a memcpy operation with a -1 argument.

CVE-2004-0961

2005-02-09T00:00:00.000-05:00

2017-10-10T21:29:38.730-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov GENTOO GLSA-200409-29 CERT-VN VU#541574 BID 11222 XF freeradius-dos(17440) Memory leak in FreeRADIUS before 1.0.1 allows remote attackers to cause a denial of service (memory exhaustion) via a series of Access-Request packets with (1) Ascend-Send-Secret, (2) Ascend-Recv-Secret, or (3) Tunnel-Password attributes.

cpe:/a:apple:apple_remote_desktop:2.0.0

CVE-2004-0962

2005-02-09T00:00:00.000-05:00

2018-10-30T12:25:17.747-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2004-10-27 Apple Remote Desktop Client 1.2.4 executes a GUI application as root when it is started by an Apple Remote Desktop Administrator application, which allows remote authenticated users to execute arbitrary code when loginwindow is active via Fast User Switching.

cpe:/a:microsoft:word:2002:sp3

CVE-2004-0963

2005-02-09T00:00:00.000-05:00

2018-10-12T17:35:32.593-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20041006 [HV-HIGH] MS Word multiple exceptions, at least one exploitable MS MS05-023 XF word-file-parsing-bo(17635) Buffer overflow in Microsoft Word 2002 (10.6612.6714) SP3, and possibly other versions, allows remote attackers to cause a denial of service (application exception) and possibly execute arbitrary code in winword.exe via certain unexpected values in a .doc file, including (1) an offset that triggers an out-of-bounds memory access, (2) a certain value that causes a large memory copy as triggered by an integer conversion error, and other values.

cpe:/a:zinf:zinf:2.2.1 cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::hppa cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::sparc

CVE-2004-0964

2005-02-09T00:00:00.000-05:00

2017-07-10T21:30:36.950-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20040924 Buffer overflow in Zinf 2.2.1 for Win32 BUGTRAQ 20040927 Re: Buffer overflow in Zinf 2.2.1 for Win32+exploit SREASON 8341 DEBIAN DSA-587 BID 11248 XF zinf-pls-bo(17491) Buffer overflow in Zinf 2.2.1 on Windows, and other older versions for Linux, allows remote attackers or local users to execute arbitrary code via certain values in a .pls file.

cpe:/o:hp:hp-ux:11.00 cpe:/o:hp:hp-ux:11.11 cpe:/o:hp:hp-ux:11.22 cpe:/o:hp:hp-ux:11.23::ia64_64-bit

CVE-2004-0965

2005-02-09T00:00:00.000-05:00

2017-10-10T21:29:38.873-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20041021 NSFOCUS SA2004-02 : HP-UX stmkfont Local Privilege Escalation Vulnerability MISC http://www.nsfocus.com/english/homepage/research/0402.htm HP SSRT4807 BID 11493 XF hpux-stmkfont-gain-privileges(17813) stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to execute arbitrary code by modifying the PATH environment variable to point to malicious programs.

cpe:/a:gnu:gettext:0.14.1 cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc

CVE-2004-0966

2005-02-09T00:00:00.000-05:00

2017-07-10T21:30:37.107-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136323 OPENPKG OpenPKG-SA-2004.055 GENTOO GLSA-200410-10 FEDORA FLSA:136323 BID 11282 TRUSTIX 2004-0050 MANDRIVA MDKSA-2006:051 XF script-temporary-file-overwrite(17583) UBUNTU USN-5-1 The (1) autopoint and (2) gettextize scripts in the GNU gettext package 1.14 and later versions, as used in Trustix Secure Linux 1.5 through 2.1 and other operating systems, allows local users to overwrite files via a symlink attack on temporary files.

cpe:/a:aladdin_enterprises:ghostscript:4.3 cpe:/a:aladdin_enterprises:ghostscript:4.3.2 cpe:/a:aladdin_enterprises:ghostscript:5.10.10 cpe:/a:aladdin_enterprises:ghostscript:5.10.10::mdk cpe:/a:aladdin_enterprises:ghostscript:5.10.10_1 cpe:/a:aladdin_enterprises:ghostscript:5.10.10_1::mdk cpe:/a:aladdin_enterprises:ghostscript:5.10.12cl cpe:/a:aladdin_enterprises:ghostscript:5.10.15 cpe:/a:aladdin_enterprises:ghostscript:5.10.16 cpe:/a:aladdin_enterprises:ghostscript:5.10cl cpe:/a:aladdin_enterprises:ghostscript:5.50 cpe:/a:aladdin_enterprises:ghostscript:5.50.8 cpe:/a:aladdin_enterprises:ghostscript:5.50.8_7 cpe:/a:aladdin_enterprises:ghostscript:6.51 cpe:/a:aladdin_enterprises:ghostscript:6.52 cpe:/a:aladdin_enterprises:ghostscript:6.53 cpe:/a:aladdin_enterprises:ghostscript:7.0.4 cpe:/a:aladdin_enterprises:ghostscript:7.0.5 cpe:/a:aladdin_enterprises:ghostscript:7.0.6 cpe:/a:aladdin_enterprises:ghostscript:7.0.7

CVE-2004-0967

2005-02-09T00:00:00.000-05:00

2017-10-10T21:29:38.933-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov SCO SCOSA-2006.19 SCO SCOSA-2006.23 CONFIRM http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136321 REDHAT RHSA-2005:081 BID 11285 TRUSTIX 2004-0050 XF script-temporary-file-overwrite(17583) UBUNTU USN-3-1 The (1) pj-gs.sh, (2) ps2epsi, (3) pv.sh, and (4) sysvlp.sh scripts in the ESP Ghostscript (espgs) package in Trustix Secure Linux 1.5 through 2.1, and other operating systems, allow local users to overwrite files via a symlink attack on temporary files.

cpe:/a:gnu:glibc:2.0 cpe:/a:gnu:glibc:2.0.1 cpe:/a:gnu:glibc:2.0.2 cpe:/a:gnu:glibc:2.0.3 cpe:/a:gnu:glibc:2.0.4 cpe:/a:gnu:glibc:2.0.5 cpe:/a:gnu:glibc:2.0.6 cpe:/a:gnu:glibc:2.1 cpe:/a:gnu:glibc:2.1.1 cpe:/a:gnu:glibc:2.1.1.6 cpe:/a:gnu:glibc:2.1.2 cpe:/a:gnu:glibc:2.1.3 cpe:/a:gnu:glibc:2.1.3.10 cpe:/a:gnu:glibc:2.1.9 cpe:/a:gnu:glibc:2.2 cpe:/a:gnu:glibc:2.2.1 cpe:/a:gnu:glibc:2.2.2 cpe:/a:gnu:glibc:2.2.3 cpe:/a:gnu:glibc:2.2.4 cpe:/a:gnu:glibc:2.2.5 cpe:/a:gnu:glibc:2.3 cpe:/a:gnu:glibc:2.3.1 cpe:/a:gnu:glibc:2.3.2 cpe:/a:gnu:glibc:2.3.3 cpe:/a:gnu:glibc:2.3.4 cpe:/a:gnu:glibc:2.3.10 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux_desktop:3.0

CVE-2004-0968

2005-02-09T00:00:00.000-05:00

2017-10-10T21:29:39.013-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136318 GENTOO GLSA-200410-19 DEBIAN DSA-636 REDHAT RHSA-2004:586 REDHAT RHSA-2005:261 BID 11286 TRUSTIX 2004-0050 XF script-temporary-file-overwrite(17583) UBUNTU USN-4-1 The catchsegv script in glibc 2.3.2 and earlier allows local users to overwrite files via a symlink attack on temporary files.

cpe:/a:gnu:groff:1.19 cpe:/o:gentoo:linux cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc

CVE-2004-0969

2005-02-09T00:00:00.000-05:00

2017-07-10T21:30:37.340-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136313 GENTOO GLSA-200411-15 BID 11287 TRUSTIX 2004-0050 MANDRIVA MDKSA-2006:038 XF script-temporary-file-overwrite(17583) The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.

cpe:/a:gnu:gzip:1.2.4a

CVE-2004-0970

2005-02-09T00:00:00.000-05:00

2017-07-10T21:30:37.417-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov DEBIAN DSA-588 BID 11288 TRUSTIX 2004-0050 MISC http://www.zataz.net/adviso/ncompress-09052005.txt XF script-temporary-file-overwrite(17583) The (1) gzexe, (2) zdiff, and (3) znew scripts in the gzip package, as used by other packages such as ncompress, allows local users to overwrite files via a symlink attack on temporary files. NOTE: the znew vulnerability may overlap CVE-2003-0367.

cpe:/a:mit:kerberos:5-1.3.4

CVE-2004-0971

2005-02-09T00:00:00.000-05:00

2017-10-10T21:29:39.090-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136304 GENTOO GLSA-200410-24 REDHAT RHSA-2005:012 BID 11289 TRUSTIX 2004-0050 XF script-temporary-file-overwrite(17583) The krb5-send-pr script in the kerberos5 (krb5) package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.

cpe:/a:lvm:logical_volume_management_utilities:1.0.1 cpe:/a:lvm:logical_volume_management_utilities:1.0.4 cpe:/a:lvm:logical_volume_management_utilities:1.0.7 cpe:/a:lvm:logical_volume_management_utilities:1.0.8 cpe:/o:gentoo:linux

CVE-2004-0972

2005-02-09T00:00:00.000-05:00

2017-10-10T21:29:39.153-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136308 REDHAT RHBA-2004:232 BID 11290 TRUSTIX 2004-0050 XF script-temporary-file-overwrite(17583) The lvmcreate_initrd script in the lvm package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.

CVE-2004-0973

2004-12-23T00:00:00.000-05:00

2008-09-10T15:28:25.837-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2004-0457. Reason: This candidate is a reservation duplicate of CVE-2004-0457. Notes: All CVE users should reference CVE-2004-0457 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

cpe:/a:netatalk:open_source_apple_file_share_protocol_suite:1.5_pre6 cpe:/a:netatalk:open_source_apple_file_share_protocol_suite:1.6.1 cpe:/a:netatalk:open_source_apple_file_share_protocol_suite:1.6.4 cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:9.2::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.1 cpe:/o:mandrakesoft:mandrake_linux:10.1::x86_64 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1::x86_64 cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:redhat:fedora_core:core_3.0

CVE-2004-0974

2005-02-09T00:00:00.000-05:00

2017-07-10T21:30:37.590-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov GENTOO GLSA-200410-25 TRUSTIX 2004-0050 XF script-temporary-file-overwrite(17583) The netatalk package in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to overwrite files via a symlink attack on temporary files.

cpe:/a:mandrakesoft:mandrake_multi_network_firewall:8.2 cpe:/a:openssl:openssl:0.9.6 cpe:/a:openssl:openssl:0.9.6a cpe:/a:openssl:openssl:0.9.6b cpe:/a:openssl:openssl:0.9.6c cpe:/a:openssl:openssl:0.9.6d cpe:/a:openssl:openssl:0.9.6e cpe:/a:openssl:openssl:0.9.6f cpe:/a:openssl:openssl:0.9.6g cpe:/a:openssl:openssl:0.9.6h cpe:/a:openssl:openssl:0.9.6i cpe:/a:openssl:openssl:0.9.6j cpe:/a:openssl:openssl:0.9.6k cpe:/a:openssl:openssl:0.9.6l cpe:/a:openssl:openssl:0.9.6m cpe:/a:openssl:openssl:0.9.7c cpe:/a:openssl:openssl:0.9.7d cpe:/o:gentoo:linux cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:9.2::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.1 cpe:/o:mandrakesoft:mandrake_linux:10.1::x86_64 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1::x86_64

CVE-2004-0975

2005-02-09T00:00:00.000-05:00

2017-10-10T21:29:39.230-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136302 DEBIAN DSA-603 GENTOO GLSA-200411-15 REDHAT RHSA-2005:476 BID 11293 TRUSTIX 2004-0050 XF script-temporary-file-overwrite(17583) The der_chop script in the openssl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.

cpe:/a:larry_wall:perl:5.6 cpe:/a:larry_wall:perl:5.6.1 cpe:/a:larry_wall:perl:5.8.0 cpe:/a:larry_wall:perl:5.8.1 cpe:/a:larry_wall:perl:5.8.3

CVE-2004-0976

2005-02-09T00:00:00.000-05:00

2017-10-10T21:29:39.293-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FEDORA FLSA-2006:152845 OPENPKG OpenPKG-SA-2005.001 DEBIAN DSA-620 MANDRAKE MDKSA-2005:031 REDHAT RHSA-2005:881 BID 11294 TRUSTIX 2004-0050 XF script-temporary-file-overwrite(17583) Multiple scripts in the perl package in Trustix Secure Linux 1.5 through 2.1 and other operating systems allows local users to overwrite files via a symlink attack on temporary files.

cpe:/a:postgresql:postgresql:7.2.1 cpe:/a:postgresql:postgresql:7.4.3 cpe:/a:postgresql:postgresql:7.4.5 cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:9.2::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.1 cpe:/o:mandrakesoft:mandrake_linux:10.1::x86_64 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1::x86_64 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1

CVE-2004-0977

2005-02-09T00:00:00.000-05:00

2017-10-10T21:29:39.373-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=136300 OPENPKG OpenPKG-SA-2004.046 GENTOO GLSA-200410-16 DEBIAN DSA-577 MANDRAKE MDKSA-2004:149 REDHAT RHSA-2004:489 BID 11295 TRUSTIX 2004-0050 XF script-temporary-file-overwrite(17583) UBUNTU USN-6-1 The make_oidjoins_check script in PostgreSQL 7.4.5 and earlier allows local users to overwrite files via a symlink attack on temporary files.

CVE-2004-0978

2005-02-09T00:00:00.000-05:00

2018-10-12T17:35:33.513-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov BUGTRAQ 20050119 MSN Heartbeat Control Buffer Overflow CERT-VN VU#673134 MISC http://www.ngssoftware.com/advisories/heartbeatfull.txt BID 11367 MS MS04-038 XF heartbeat-activex(17714) Heap-based buffer overflow in the Hrtbeat.ocx (Heartbeat) ActiveX control for Internet Explorer 5.01 through 6, when users who visit online gaming sites that are associated with MSN, allows remote attackers to execute arbitrary code via the SetupData parameter.

cpe:/a:microsoft:ie:6.0 cpe:/a:microsoft:ie:6.0:sp1 cpe:/a:microsoft:ie:6.0:sp2 cpe:/o:microsoft:windows_xp:::64-bit cpe:/o:microsoft:windows_xp:::embedded cpe:/o:microsoft:windows_xp:::home cpe:/o:microsoft:windows_xp:::media_center cpe:/o:microsoft:windows_xp::gold:professional cpe:/o:microsoft:windows_xp::sp1:64-bit cpe:/o:microsoft:windows_xp::sp1:embedded cpe:/o:microsoft:windows_xp::sp1:home cpe:/o:microsoft:windows_xp::sp1:media_center cpe:/o:microsoft:windows_xp::sp2:home cpe:/o:microsoft:windows_xp::sp2:media_center cpe:/o:microsoft:windows_xp::sp2:tablet_pc

CVE-2004-0979

2004-12-31T00:00:00.000-05:00

2018-10-12T17:35:34.140-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CERT-VN VU#630720 CERT TA04-293A MS MS04-038 XF ie-dragdrop-security-bypass(17820) Internet Explorer on Windows XP does not properly modify the "Drag and Drop or copy and paste files" setting when the user sets it to "Disable" or "Prompt," which may enable security-sensitive operations that are inconsistent with the user's intended configuration.

cpe:/a:angus_mackay:ez-ipupdate:3.0.11b5 cpe:/a:angus_mackay:ez-ipupdate:3.0.11b8 cpe:/o:debian:debian_linux:3.0 cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::hppa cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::sparc cpe:/o:gentoo:linux

CVE-2004-0980

2005-02-09T00:00:00.000-05:00

2017-07-10T21:30:37.950-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20041111 ez-ipupdate format string bug DEBIAN DSA-592 GENTOO GLSA-200411-20 MANDRAKE MDKSA-2004:129 BID 11657 XF eziupdate-showmessage-format-string(18032) Format string vulnerability in ez-ipupdate.c for ez-ipupdate 3.0.10 through 3.0.11b8, when running in daemon mode with certain service types in use, allows remote servers to execute arbitrary code.

cpe:/a:imagemagick:imagemagick:5.3.3 cpe:/a:imagemagick:imagemagick:5.4.3 cpe:/a:imagemagick:imagemagick:5.4.4.5 cpe:/a:imagemagick:imagemagick:5.4.7 cpe:/a:imagemagick:imagemagick:5.4.8 cpe:/a:imagemagick:imagemagick:5.4.8.2.1.1.0 cpe:/a:imagemagick:imagemagick:5.5.3.2.1.2.0 cpe:/a:imagemagick:imagemagick:5.5.6.0_2003-04-09 cpe:/a:imagemagick:imagemagick:5.5.7 cpe:/a:imagemagick:imagemagick:6.0 cpe:/a:imagemagick:imagemagick:6.0.1 cpe:/a:imagemagick:imagemagick:6.0.3 cpe:/a:imagemagick:imagemagick:6.0.4 cpe:/a:imagemagick:imagemagick:6.0.5 cpe:/a:imagemagick:imagemagick:6.0.6 cpe:/a:imagemagick:imagemagick:6.0.7 cpe:/a:imagemagick:imagemagick:6.0.8 cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::hppa cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::sparc cpe:/o:gentoo:linux cpe:/o:suse:suse_linux:8.0 cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.2

CVE-2004-0981

2005-02-09T00:00:00.000-05:00

2017-10-10T21:29:39.450-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

GENTOO GLSA-200411-11 CONFIRM http://www.imagemagick.org/www/Changelog.html BID 11548 XF imagemagick-exif-image-bo(17903) UBUNTU USN-7-1 Buffer overflow in the EXIF parsing routine in ImageMagick before 6.1.0 allows remote attackers to execute arbitrary code via a certain image file.

cpe:/a:mpg123:mpg123:0.59r cpe:/a:mpg123:mpg123:pre0.59s

CVE-2004-0982

2005-02-09T00:00:00.000-05:00

2017-07-10T21:30:38.073-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20041019 mpg123 "getauthfromurl" buffer overflow SECTRACK 1011832 MISC http://www.barrossecurity.com/advisories/mpg123_getauthfromurl_bof_advisory.txt DEBIAN DSA-578 GENTOO GLSA-200410-27 BID 11468 XF mpg123-getauthfromurl-bo(17574) Buffer overflow in the getauthfromURL function in httpget.c in mpg123 pre0.59s and mpg123 0.59r could allow remote attackers or local users to execute arbitrary code via an mp3 file that contains a long string before the @ (at sign) in a URL.

cpe:/a:yukihiro_matsumoto:ruby:1.6 cpe:/a:yukihiro_matsumoto:ruby:1.6.7 cpe:/a:yukihiro_matsumoto:ruby:1.8 cpe:/a:yukihiro_matsumoto:ruby:1.8.1 cpe:/a:yukihiro_matsumoto:ruby:1.8.2_pre1 cpe:/a:yukihiro_matsumoto:ruby:1.8.2_pre2 cpe:/o:gentoo:linux cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:9.2::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.1 cpe:/o:mandrakesoft:mandrake_linux:10.1::x86_64 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1::x86_64 cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc

CVE-2004-0983

2005-03-01T00:00:00.000-05:00

2018-10-03T17:29:06.963-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov DEBIAN DSA-586 MANDRAKE MDKSA-2004:128 REDHAT RHSA-2004:635 BID 11618 XF ruby-cgi-dos(17985) UBUNTU USN-20-1 The CGI module in Ruby 1.6 before 1.6.8, and 1.8 before 1.8.2, allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a certain HTTP request.

cpe:/a:gnu:mailutils:1.0.5.4

CVE-2004-0984

2004-12-31T00:00:00.000-05:00

2008-09-10T15:28:30.023-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

2005-06-17T14:16:00.000-04:00

ALLOWS_ADMIN_ACCESS

CONFIRM http://packages.debian.org/changelogs/pool/main/m/mailutils/mailutils_0.6-2/changelog Unknown vulnerability in the dotlock implementation in mailutils before 1:0.5-4 on Debian GNU/Linux allows attackers to gain privileges.

cpe:/a:microsoft:ie:6.0:sp2

CVE-2004-0985

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:38.183-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20041020 Re: How to Break Windows XP SP2 + Internet Explorer 6 SP2 BUGTRAQ 20041020 How to Break Windows XP SP2 + Internet Explorer 6 SP2 NTBUGTRAQ 20041020 How to Break Windows XP SP2 + Internet Explorer 6 SP2 XF ie-anchorclick-command-execution(17824) Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code, as demonstrated using a document with a draggable file type such as .xml, .doc, .py, .cdf, .css, .pdf, or .ppt, and using ADODB.Connection and ADODB.recordset to write to a .hta file that is interpreted in the Local Zone by HTML Help.

cpe:/a:suse:suse_iptables:1.2.11 cpe:/o:debian:debian_linux:3.0 cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::hppa cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::sparc cpe:/o:linux:linux_kernel:2.0.2 cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.4.1 cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:linux:linux_kernel:2.4.3 cpe:/o:linux:linux_kernel:2.4.4 cpe:/o:linux:linux_kernel:2.4.5 cpe:/o:linux:linux_kernel:2.4.6 cpe:/o:linux:linux_kernel:2.4.7 cpe:/o:linux:linux_kernel:2.4.8 cpe:/o:linux:linux_kernel:2.4.9 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.4.26 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.9:2.6.20 cpe:/o:redhat:fedora_core:core_3.0

CVE-2004-0986

2005-03-01T00:00:00.000-05:00

2017-07-10T21:30:38.247-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONFIRM http://rpmfind.net/linux/RPM/suse/updates/9.2/i386/rpm/i586/iptables-1.2.11-4.2.i586.html CIAC P-026 DEBIAN DSA-580 MANDRAKE MDKSA-2004:125 BID 11570 FEDORA FLSA:2252 XF iptables-module-dos(17928) UBUNTU USN-81-1 Iptables before 1.2.11, under certain conditions, does not properly load the required modules at system startup, which causes the firewall rules to fail to load and protect the system from remote attackers.

cpe:/a:yard_radius:yard_radius:1.0.17 cpe:/a:yard_radius:yard_radius:1.0.18 cpe:/a:yard_radius:yard_radius:1.0.19 cpe:/a:yard_radius:yard_radius:1.0.20 cpe:/a:yard_radius:yard_radius:1.0_pre13 cpe:/a:yard_radius:yard_radius:1.0_pre14 cpe:/a:yard_radius:yard_radius:1.0_pre15 cpe:/a:yard_radius_project:yard_radius:1.0.16

CVE-2004-0987

2005-01-10T00:00:00.000-05:00

2018-10-30T12:25:13.200-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=278384 DEBIAN DSA-598 BID 11753 XF yardradius-processmenu-bo(18270) Buffer overflow in the process_menu function in yardradius 1.0.20 allows remote attackers to execute arbitrary code.

cpe:/a:apple:quicktime:5.0.2 cpe:/a:apple:quicktime:6.0 cpe:/a:apple:quicktime:6.1 cpe:/a:apple:quicktime:6.5 cpe:/a:apple:quicktime:6.5.1

CVE-2004-0988

2005-03-01T00:00:00.000-05:00

2008-09-10T15:28:31.337-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2004-01-01T00:00:00.000-05:00

APPLE APPLE-SA-2004-10-27 Integer overflow on Apple QuickTime before 6.5.2, when running on Windows systems, allows remote attackers to cause a denial of service (memory consumption) via certain inputs that cause a large memory operation.

cpe:/a:xmlsoft:libxml:1.8.17 cpe:/a:xmlsoft:libxml2:2.5.11 cpe:/a:xmlsoft:libxml2:2.6.6 cpe:/a:xmlsoft:libxml2:2.6.7 cpe:/a:xmlsoft:libxml2:2.6.8 cpe:/a:xmlsoft:libxml2:2.6.9 cpe:/a:xmlsoft:libxml2:2.6.11 cpe:/a:xmlsoft:libxml2:2.6.12 cpe:/a:xmlsoft:libxml2:2.6.13 cpe:/a:xmlsoft:libxml2:2.6.14 cpe:/a:xmlstarlet:command_line_xml_toolkit:0.9.1 cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1 cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc

CVE-2004-0989

2005-03-01T00:00:00.000-05:00

2017-10-10T21:29:39.607-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONECTIVA CLA-2004:890 APPLE APPLE-SA-2005-01-25 BUGTRAQ 20041026 libxml2 remote buffer overflows (not in xml parsing code though) SECTRACK 1011941 CIAC P-029 DEBIAN DSA-582 GENTOO GLSA-200411-05 SUSE SUSE-SR:2005:001 REDHAT RHSA-2004:615 REDHAT RHSA-2004:650 BID 11526 XF libxml2-xmlnanoftpscanurl-bo(17870) XF libxml2-nanoftp-file-bo(17872) XF libxml2-xmlnanoftpscanproxy-bo(17875) XF libxml2-nanohttp-file-bo(17876) UBUNTU USN-89-1 Multiple buffer overflows in libXML 2.6.12 and 2.6.13 (libxml2), and possibly other versions, may allow remote attackers to execute arbitrary code via (1) a long FTP URL that is not properly handled by the xmlNanoFTPScanURL function, (2) a long proxy URL containing FTP data that is not properly handled by the xmlNanoFTPScanProxy function, and other overflows related to manipulation of DNS length values, including (3) xmlNanoFTPConnect, (4) xmlNanoHTTPConnectHost, and (5) xmlNanoHTTPConnectHost.

cpe:/a:gd_graphics_library:gdlib:1.8.4 cpe:/a:gd_graphics_library:gdlib:2.0.1 cpe:/a:gd_graphics_library:gdlib:2.0.15 cpe:/a:gd_graphics_library:gdlib:2.0.20 cpe:/a:gd_graphics_library:gdlib:2.0.21 cpe:/a:gd_graphics_library:gdlib:2.0.22 cpe:/a:gd_graphics_library:gdlib:2.0.23 cpe:/a:gd_graphics_library:gdlib:2.0.26 cpe:/a:gd_graphics_library:gdlib:2.0.27 cpe:/a:gd_graphics_library:gdlib:2.0.28 cpe:/a:openpkg:openpkg:2.1 cpe:/a:openpkg:openpkg:2.2 cpe:/a:openpkg:openpkg:current cpe:/o:gentoo:linux cpe:/o:suse:suse_linux:8.0 cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.2 cpe:/o:trustix:secure_linux:1.5 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1 cpe:/o:trustix:secure_linux:2.2

CVE-2004-0990

2005-03-01T00:00:00.000-05:00

2017-10-10T21:29:39.700-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SUSE SUSE-SR:2006:003 BUGTRAQ 20041026 libgd integer overflow CIAC P-071 DEBIAN DSA-589 DEBIAN DSA-591 DEBIAN DSA-601 DEBIAN DSA-602 MANDRAKE MDKSA-2004:132 MANDRIVA MDKSA-2006:113 MANDRIVA MDKSA-2006:114 MANDRIVA MDKSA-2006:122 REDHAT RHSA-2004:638 BID 11523 TRUSTIX 2004-0058 XF gd-png-bo(17866) CONFIRM https://issues.rpath.com/browse/RPL-939 UBUNTU USN-11-1 UBUNTU USN-25-1 Integer overflow in GD Graphics Library libgd 2.0.28 (libgd2), and possibly other versions, allows remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow in the gdImageCreateFromPngCtx function, a different set of vulnerabilities than CVE-2004-0941.

cpe:/a:mpg123:mpg123:0.59m cpe:/a:mpg123:mpg123:0.59n cpe:/a:mpg123:mpg123:0.59o cpe:/a:mpg123:mpg123:0.59p cpe:/a:mpg123:mpg123:0.59q cpe:/a:mpg123:mpg123:0.59r cpe:/a:mpg123:mpg123:0.59s cpe:/o:suse:suse_linux:8.0 cpe:/o:suse:suse_linux:8.0::i386 cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.2

CVE-2004-0991

2005-01-11T00:00:00.000-05:00

2008-09-10T15:28:31.557-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-17T14:17:00.000-04:00

ALLOWS_USER_ACCESS

GENTOO GLSA-200501-14 MANDRAKE MDKSA-2005:009 BID 12218 Buffer overflow in mpg123 before 0.59s-r9 allows remote attackers to execute arbitrary code via frame headers in MP2 or MP3 files.

cpe:/a:proxytunnel:proxytunnel:1.0.6 cpe:/a:proxytunnel:proxytunnel:1.1.3 cpe:/a:proxytunnel:proxytunnel:1.2.2 cpe:/a:proxytunnel:proxytunnel:1.2_.0

CVE-2004-0992

2005-03-01T00:00:00.000-05:00

2017-07-10T21:30:38.573-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://proxytunnel.sourceforge.net/news.html GENTOO GLSA-200411-07 BID 11592 XF proxytunnel-message-format-string(17945) Format string vulnerability in the -a option (daemon mode) in Proxytunnel before 1.2.3 allows remote attackers to execute arbitrary code via format string specifiers in an invalid proxy answer.

cpe:/a:hp:sockd:0.4 cpe:/a:hp:sockd:0.5

CVE-2004-0993

2005-01-10T00:00:00.000-05:00

2017-07-10T21:30:38.637-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

DEBIAN DSA-604 BID 11800 XF hpsockd-bo(18359) Buffer overflow in hpsockd before 0.6 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code.

cpe:/a:zgv:xzgv_image_viewer:0.6 cpe:/a:zgv:xzgv_image_viewer:0.7 cpe:/a:zgv:xzgv_image_viewer:0.8 cpe:/a:zgv:zgv_image_viewer:5.5 cpe:/a:zgv:zgv_image_viewer:5.6 cpe:/a:zgv:zgv_image_viewer:5.7 cpe:/a:zgv:zgv_image_viewer:5.8 cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::hppa cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::sparc

CVE-2004-0994

2005-01-10T00:00:00.000-05:00

2017-07-10T21:30:38.700-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20041213 Multiple Vendor xzgv PRF Parsing Integer Overflow Vulnerability CONFIRM http://rus.members.beeb.net/xzgv-0.8-integer-overflow-fix.diff DEBIAN DSA-614 XF xzgv-readprffile-bo(18454) Multiple integer overflows in xzgv 0.8 and earlier allow remote attackers to execute arbitrary code via images with large width and height values, which trigger a heap-based buffer overflow, as demonstrated in the read_prf_file function in readprf.c. NOTE: CVE-2004-0994 and CVE-2004-1095 identify sets of bugs that only partially overlap, despite having the same developer. Therefore, they should be regarded as distinct.

CVE-2004-0995

2017-05-11T10:29:02.027-04:00

2017-05-11T10:29:02.040-04:00

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2004. Notes: none.

cpe:/a:cscope:cscope:13.0 cpe:/a:cscope:cscope:15.1 cpe:/a:cscope:cscope:15.3 cpe:/a:cscope:cscope:15.4 cpe:/a:cscope:cscope:15.5 cpe:/o:debian:debian_linux:3.0 cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::hppa cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::sparc cpe:/o:gentoo:linux cpe:/o:sco:unixware:7.1.1 cpe:/o:sco:unixware:7.1.3 cpe:/o:sco:unixware:7.1.4

CVE-2004-0996

2005-01-10T00:00:00.000-05:00

2017-07-10T21:30:38.763-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONFIRM http://docs.info.apple.com/article.html?artnum=306172 APPLE APPLE-SA-2007-07-31 BUGTRAQ 20041124 STG Security Advisory: [SSA-20041122-09] cscope insecure temp file creation vulnerability DEBIAN DSA-610 GENTOO GLSA-200412-11 BUGTRAQ 20041117 RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch. BUGTRAQ 20041118 Re: RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch. BUGTRAQ 20041118 Re: RX171104 Cscope v15.5 and minors - symlink vulnerability - advisory, exploit and patch. BID 11697 BID 25159 VUPEN ADV-2007-2732 XF cscope-tmp-race-condition(18125) main.c in cscope 15-4 and 15-5 creates temporary files with predictable filenames, which allows local users to overwrite arbitrary files via a symlink attack.

CVE-2004-0997

2004-12-31T00:00:00.000-05:00

2008-09-05T16:40:02.280-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

2006-05-31T15:14:00.000-04:00

ALLOWS_OTHER_ACCESS

CONFIRM http://kernel.debian.net/debian/pool/main/kernel-source-2.4.17/kernel-source-2.4.17_2.4.17-1woody4_ia64.changes MISC http://svn.debian.org/wsvn/kernel/patch-tracking/CVE-2004-0997?op=file&rev=0&sc=0 DEBIAN DSA-1067 DEBIAN DSA-1069 DEBIAN DSA-1070 DEBIAN DSA-1082 BID 18176 Unspecified vulnerability in the ptrace MIPS assembly code in Linux kernel 2.4 before 2.4.17 allows local users to gain privileges via unknown vectors.

cpe:/a:telnetd:telnetd:0.17.18 cpe:/a:telnetd:telnetd:0.17.25 cpe:/a:telnetd:telnetd-ssl:0.17.17_0.1.1 cpe:/a:telnetd:telnetd-ssl:0.17.17_0.1.2 cpe:/a:telnetd:telnetd-ssl:0.17.17_0.1.2::woody1

CVE-2004-0998

2004-12-23T00:00:00.000-05:00

2017-07-10T21:30:38.807-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

DEBIAN DSA-616 CERT-VN VU#995038 XF netkit-telnetssl-format-string(18654) Format string vulnerability in telnetd-ssl 0.17 and earlier allows remote attackers to execute arbitrary code.

cpe:/a:zgv:zgv_image_viewer:5.5.3 cpe:/a:zgv:zgv_image_viewer:5.6 cpe:/a:zgv:zgv_image_viewer:5.7 cpe:/a:zgv:zgv_image_viewer:5.8

CVE-2004-0999

2004-12-31T00:00:00.000-05:00

2017-07-10T21:30:38.870-04:00

2.6

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov DEBIAN DSA-608 BID 11915 XF zgv-multiple-image-dos(18480) zgv 5.5.3 allows remote attackers to cause a denial of service (application crash via segmentation fault) via crafted multiple-image (animated) GIF images.

cpe:/a:debian:lintian:1.2_0.17.1

CVE-2004-1000

2004-01-10T00:00:00.000-05:00

2017-07-10T21:30:38.903-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov XF lintian-symlink(18808) lintian 1.23 and earlier removes the working directory even if it was not created by lintian, which may allow local users to delete arbitrary files or directories via a symlink attack.

cpe:/a:debian:shadow-utils:4.0.4.1

CVE-2004-1001

2005-03-01T00:00:00.000-05:00

2017-07-10T21:30:38.967-04:00

4.6

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONECTIVA CLA-2004:894 DEBIAN DSA-585 XF shadow-pwdcheck-modify-account(17902) Unknown vulnerability in the passwd_check function in Shadow 4.0.4.1, and possibly other versions before 4.0.5, allows local users to conduct unauthorized activities when an error from a pam_chauthtok function call is not properly handled.

cpe:/a:samba:ppp:2.4.1

CVE-2004-1002

2005-03-01T00:00:00.000-05:00

2017-07-10T21:30:39.027-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20041026 pppd out of bounds memory access, possible DOS XF ppp-ccp-headers-dos(17874) UBUNTU USN-12-1 Integer underflow in pppd in cbcp.c for ppp 2.4.1 allows remote attackers to cause a denial of service (daemon crash) via a CBCP packet with an invalid length value that causes pppd to access an incorrect memory location.

cpe:/a:trend_micro:scanmail_domino:2.6 cpe:/a:trend_micro:scanmail_domino:2.51

CVE-2004-1003

2005-03-01T00:00:00.000-05:00

2017-07-10T21:30:39.073-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov MISC http://cgi.nessus.org/plugins/dump.php3?id=14312 XF scanmail-file-access(17962) Trend ScanMail allows remote attackers to obtain potentially sensitive information or disable the anti-virus capability via the smency.nsf file.

cpe:/a:midnight_commander:midnight_commander:4.5.40 cpe:/a:midnight_commander:midnight_commander:4.5.41 cpe:/a:midnight_commander:midnight_commander:4.5.42 cpe:/a:midnight_commander:midnight_commander:4.5.43 cpe:/a:midnight_commander:midnight_commander:4.5.44 cpe:/a:midnight_commander:midnight_commander:4.5.45 cpe:/a:midnight_commander:midnight_commander:4.5.46 cpe:/a:midnight_commander:midnight_commander:4.5.47 cpe:/a:midnight_commander:midnight_commander:4.5.48 cpe:/a:midnight_commander:midnight_commander:4.5.49 cpe:/a:midnight_commander:midnight_commander:4.5.50 cpe:/a:midnight_commander:midnight_commander:4.5.51 cpe:/a:midnight_commander:midnight_commander:4.5.52 cpe:/a:midnight_commander:midnight_commander:4.5.54 cpe:/a:midnight_commander:midnight_commander:4.5.55 cpe:/a:midnight_commander:midnight_commander:4.6 cpe:/o:debian:debian_linux:3.0 cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::hppa cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::sparc cpe:/o:gentoo:linux cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::advanced_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:2.1::workstation_ia64 cpe:/o:redhat:linux_advanced_workstation:2.1::ia64 cpe:/o:redhat:linux_advanced_workstation:2.1::itanium_processor cpe:/o:suse:suse_linux:8.0 cpe:/o:suse:suse_linux:8.0::i386 cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.2 cpe:/o:turbolinux:turbolinux_server:7.0 cpe:/o:turbolinux:turbolinux_server:8.0 cpe:/o:turbolinux:turbolinux_workstation:7.0 cpe:/o:turbolinux:turbolinux_workstation:8.0

CVE-2004-1004

2005-04-14T00:00:00.000-04:00

2017-07-10T21:30:39.137-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

DEBIAN DSA-639 GENTOO GLSA-200502-24 REDHAT RHSA-2005:217 XF midnightcommander-format-string(18902) Multiple format string vulnerabilities in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact.

CVE-2004-1005

2005-04-14T00:00:00.000-04:00

2017-07-10T21:30:39.200-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

DEBIAN DSA-639 GENTOO GLSA-200502-24 REDHAT RHSA-2005:217 XF midnight-commander-bo(18898) Multiple buffer overflows in Midnight Commander (mc) 4.5.55 and earlier allow remote attackers to have an unknown impact.

cpe:/a:isc:dhcpd:2.0.pl5 cpe:/a:isc:dhcpd:3.0 cpe:/a:isc:dhcpd:3.0:rc12 cpe:/a:isc:dhcpd:3.0:rc4 cpe:/a:isc:dhcpd:3.0.1:rc1 cpe:/a:isc:dhcpd:3.0.1:rc10 cpe:/a:isc:dhcpd:3.0.1:rc11 cpe:/a:isc:dhcpd:3.0.1:rc12 cpe:/a:isc:dhcpd:3.0.1:rc13 cpe:/a:isc:dhcpd:3.0.1:rc14 cpe:/a:isc:dhcpd:3.0.1:rc2 cpe:/a:isc:dhcpd:3.0.1:rc3 cpe:/a:isc:dhcpd:3.0.1:rc4 cpe:/a:isc:dhcpd:3.0.1:rc5 cpe:/a:isc:dhcpd:3.0.1:rc6 cpe:/a:isc:dhcpd:3.0.1:rc7 cpe:/a:isc:dhcpd:3.0.1:rc8 cpe:/a:isc:dhcpd:3.0.1:rc9 cpe:/a:isc:dhcpd:3.0_b2pl9 cpe:/a:isc:dhcpd:3.0_b2pl23 cpe:/a:isc:dhcpd:3.0_pl1 cpe:/a:isc:dhcpd:3.0_pl2

CVE-2004-1006

2005-03-01T00:00:00.000-05:00

2017-07-10T21:30:39.247-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20041025 debian dhcpd, old format string bug BUGTRAQ 20041102 Re: debian dhcpd, old format string bug BUGTRAQ 20041105 Re: debian dhcpd, old format string bug DEBIAN DSA-584 CERT-VN VU#448384 REDHAT RHSA-2005:212 BID 11591 XF dhcp-log-format-string(17963) Format string vulnerability in the log functions in dhcpd for dhcp 2.x allows remote DNS servers to execute arbitrary code via certain DNS messages, a different vulnerability than CVE-2002-0702.

cpe:/o:bogofilter:email_filter:0.9.0.3 cpe:/o:bogofilter:email_filter:0.9.0.4 cpe:/o:bogofilter:email_filter:0.9.0.5 cpe:/o:bogofilter:email_filter:0.92 cpe:/o:bogofilter:email_filter:0.92.4 cpe:/o:bogofilter:email_filter:0.92.6 cpe:/o:bogofilter:email_filter:0.92.7 cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc

CVE-2004-1007

2005-03-01T00:00:00.000-05:00

2017-07-10T21:30:39.307-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://bogofilter.sourceforge.net/security/bogofilter-SA-2004-01 XF bogofilter-dos(17916) The quoted-printable decoder in bogofilter 0.17.4 to 0.92.7 allows remote attackers to cause a denial of service (application crash) via mail headers that cause a line feed (LF) to be replaced by a null byte that is written to an incorrect memory address.

cpe:/a:putty:putty:0.48 cpe:/a:putty:putty:0.49 cpe:/a:putty:putty:0.50 cpe:/a:putty:putty:0.51 cpe:/a:putty:putty:0.52 cpe:/a:putty:putty:0.53 cpe:/a:putty:putty:0.53b cpe:/a:putty:putty:0.54 cpe:/a:putty:putty:0.55 cpe:/a:tortoisecvs:tortoisecvs:1.8

CVE-2004-1008

2005-01-10T00:00:00.000-05:00

2017-07-10T21:30:39.357-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20041027 PuTTY SSH client vulnerability CONFIRM http://www.chiark.greenend.org.uk/~sgtatham/putty/ GENTOO GLSA-200410-29 IDEFENSE 20041027 PuTTY SSH2_MSG_DEBUG Buffer Overflow Vulnerability BID 11549 CONFIRM http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002414 CONFIRM http://www-1.ibm.com/support/docview.wss?uid=ssg1S1002416 XF putty-ssh2msgdebug-bo(17886) Integer signedness error in the ssh2_rdpkt function in PuTTY before 0.56 allows remote attackers to execute arbitrary code via a SSH2_MSG_DEBUG packet with a modified stringlen parameter, which leads to a buffer overflow.

CVE-2004-1009

2005-04-14T00:00:00.000-04:00

2017-07-10T21:30:39.417-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov DEBIAN DSA-639 REDHAT RHSA-2005:512 XF midnight-commander-dos(18903) Midnight commander (mc) 4.5.55 and earlier allows remote attackers to cause a denial of service (infinite loop) via unknown attack vectors.

cpe:/a:info-zip:zip:2.3

CVE-2004-1010

2005-03-01T00:00:00.000-05:00

2018-10-03T17:29:07.760-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20041103 [HV-MED] Zip/Linux long path buffer overflow BUGTRAQ 20041103 [HV-MED] Zip/Linux long path buffer overflow GENTOO GLSA-200411-16 CIAC P-072 DEBIAN DSA-624 MISC http://www.hexview.com/docs/20041103-1.txt CONFIRM http://www.info-zip.org/FAQ.html MANDRAKE MDKSA-2004:141 REDHAT RHSA-2004:634 BID 11603 TURBO TLSA-2005-18 FEDORA FLSA:2255 XF infozip-compressed-folder-bo(17956) UBUNTU USN-18-1 Buffer overflow in Info-Zip 2.3 and possibly earlier versions, when using recursive folder compression, allows remote attackers to execute arbitrary code via a ZIP file containing a long pathname.

cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.1.7 cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.1.9 cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.1.10 cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.1.16 cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.2.0_alpha cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.2.1_beta cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.2.2_beta cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.2.3 cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.2.4 cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.2.5 cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.2.6 cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.2.7 cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.2.8 cpe:/a:openpkg:openpkg:current cpe:/o:conectiva:linux:9.0 cpe:/o:conectiva:linux:10.0 cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:redhat:fedora_core:core_3.0 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1 cpe:/o:trustix:secure_linux:2.2 cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc

CVE-2004-1011

2005-01-10T00:00:00.000-05:00

2017-07-10T21:30:39.543-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MLIST [cyrus-announce] 20041122 Cyrus IMAPd 2.2.9 Released CONFIRM http://asg.web.cmu.edu/cyrus/download/imapd/changes.html BUGTRAQ 20041122 Advisory 15/2004: Cyrus IMAP Server multiple remote vulnerabilities MISC http://security.e-matters.de/advisories/152004.html GENTOO GLSA-200411-34 MANDRAKE MDKSA-2004:139 XF cyrus-imap-username-bo(18198) Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long (1) PROXY or (2) LOGIN command, a different vulnerability than CVE-2004-1015.

CVE-2004-1012

2005-01-10T00:00:00.000-05:00

2017-07-10T21:30:39.607-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MLIST [cyrus-announce] 20041122 Cyrus IMAPd 2.2.9 Released CONFIRM http://asg.web.cmu.edu/cyrus/download/imapd/changes.html BUGTRAQ 20041122 Advisory 15/2004: Cyrus IMAP Server multiple remote vulnerabilities MISC http://security.e-matters.de/advisories/152004.html GENTOO GLSA-200411-34 DEBIAN DSA-597 MANDRAKE MDKSA-2004:139 XF cyrus-imap-commands-execute-code(18199) UBUNTU USN-31-1 The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that is treated as a different command ("body.peek") and causes an index increment error that leads to an out-of-bounds memory corruption.

CVE-2004-1013

2005-01-10T00:00:00.000-05:00

2016-12-07T21:59:50.367-05:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MLIST [cyrus-announce] 20041122 Cyrus IMAPd 2.2.9 Released CONFIRM http://asg.web.cmu.edu/cyrus/download/imapd/changes.html BUGTRAQ 20041122 Advisory 15/2004: Cyrus IMAP Server multiple remote vulnerabilities MISC http://security.e-matters.de/advisories/152004.html GENTOO GLSA-200411-34 DEBIAN DSA-597 MANDRAKE MDKSA-2004:139 UBUNTU USN-31-1 The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1) "body[p", (2) "binary[p", or (3) "binary[p") that cause an index increment error that leads to an out-of-bounds memory corruption.

cpe:/a:nfs:nfs-utils:1.0.6 cpe:/o:debian:debian_linux:3.0 cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::hppa cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::sparc cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:9.2::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.1 cpe:/o:mandrakesoft:mandrake_linux:10.1::x86_64 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1::x86_64 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux_desktop:3.0

CVE-2004-1014

2005-01-10T00:00:00.000-05:00

2018-10-19T11:30:31.567-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov CONFIRM http://cvs.sourceforge.net/viewcvs.py/nfs/nfs-utils/ChangeLog?rev=1.258&view=markup DEBIAN DSA-606 REDHAT RHSA-2004:583 REDHAT RHSA-2005:014 FEDORA FLSA-2006:138098 BID 11785 TRUSTIX 2004-0065 XF nfs-utils-statd-dos(18332) UBUNTU USN-36-1 statd in nfs-utils 1.257 and earlier does not ignore the SIGPIPE signal, which allows remote attackers to cause a denial of service (server process crash) via a TCP connection that is prematurely terminated.

cpe:/a:carnegie_mellon_university:cyrus_imap_server:1.4 cpe:/a:carnegie_mellon_university:cyrus_imap_server:1.5.19 cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.0.12 cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.0.16 cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.1.7 cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.1.9 cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.1.10 cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.1.16 cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.2.0_alpha cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.2.1_beta cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.2.2_beta cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.2.3 cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.2.4 cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.2.5 cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.2.6 cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.2.7 cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.2.8 cpe:/a:carnegie_mellon_university:cyrus_imap_server:2.2.9 cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:redhat:fedora_core:core_3.0 cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc

CVE-2004-1015

2005-01-10T00:00:00.000-05:00

2017-07-10T21:30:39.747-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MLIST [cyrus-announce] 20041123 Cyrus IMAPd 2.2.10 Released CONFIRM http://asg.web.cmu.edu/cyrus/download/imapd/changes.html GENTOO GLSA-200411-34 MANDRAKE MDKSA-2004:139 XF cyrus-magic-plus-bo(18274) Buffer overflow in proxyd for Cyrus IMAP Server 2.2.9 and earlier, with the imapmagicplus option enabled, may allow remote attackers to execute arbitrary code, a different vulnerability than CVE-2004-1011.

CVE-2004-1016

2005-01-10T00:00:00.000-05:00

2018-05-02T21:29:26.897-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov MISC http://isec.pl/vulnerabilities/isec-0019-scm.txt DEBIAN DSA-1067 DEBIAN DSA-1069 DEBIAN DSA-1070 DEBIAN DSA-1082 MANDRAKE MDKSA-2005:022 SUSE SUSE-SA:2004:044 REDHAT RHSA-2004:689 REDHAT RHSA-2005:016 REDHAT RHSA-2005:017 BID 11921 FEDORA FLSA:2336 XF linux-scmsend-dos(18483) UBUNTU USN-38-1 The scm_send function in the scm layer for Linux kernel 2.4.x up to 2.4.28, and 2.6.x up to 2.6.9, allows local users to cause a denial of service (system hang) via crafted auxiliary messages that are passed to the sendmsg function, which causes a deadlock condition.

cpe:/o:linux:linux_kernel:2.4.0

CVE-2004-1017

2004-12-31T00:00:00.000-05:00

2017-10-10T21:29:39.920-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov DEBIAN DSA-1017 DEBIAN DSA-1067 DEBIAN DSA-1069 DEBIAN DSA-1070 DEBIAN DSA-1082 REDHAT RHSA-2004:689 REDHAT RHSA-2005:016 REDHAT RHSA-2005:017 BID 12102 FEDORA FLSA:2336 XF linux-ioedgeport-bo(18433) Multiple "overflows" in the io_edgeport driver for Linux kernel 2.4.x have unknown impact and unknown attack vectors.

CVE-2004-1018

2005-01-10T00:00:00.000-05:00

2017-10-10T21:29:39.997-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov BUGTRAQ 20041215 Advisory 01/2004: Multiple vulnerabilities in PHP 4/5 MISC http://www.hardened-php.net/advisories/012004.txt MANDRAKE MDKSA-2004:151 MANDRAKE MDKSA-2005:072 CONFIRM http://www.php.net/release_4_3_10.php REDHAT RHSA-2005:032 REDHAT RHSA-2005:816 HP HPSBMA01212 BUGTRAQ 20041219 PHP shmop.c module permits write of arbitrary memory. BID 12045 FEDORA FLSA:2344 XF php-shmopwrite-outofbounds-memory(18515) UBUNTU USN-99-1 Multiple integer handling errors in PHP before 4.3.10 allow attackers to bypass safe mode restrictions, cause a denial of service, or execute arbitrary code via (1) a negative offset value to the shmop_write function, (2) an "integer overflow/underflow" in the pack function, or (3) an "integer overflow/underflow" in the unpack function. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion.

cpe:/a:openpkg:openpkg:2.1 cpe:/a:openpkg:openpkg:2.2 cpe:/a:openpkg:openpkg:current cpe:/a:php:php:3.0 cpe:/a:php:php:3.0.1 cpe:/a:php:php:3.0.2 cpe:/a:php:php:3.0.3 cpe:/a:php:php:3.0.4 cpe:/a:php:php:3.0.5 cpe:/a:php:php:3.0.6 cpe:/a:php:php:3.0.7 cpe:/a:php:php:3.0.8 cpe:/a:php:php:3.0.9 cpe:/a:php:php:3.0.10 cpe:/a:php:php:3.0.11 cpe:/a:php:php:3.0.12 cpe:/a:php:php:3.0.13 cpe:/a:php:php:3.0.14 cpe:/a:php:php:3.0.15 cpe:/a:php:php:3.0.16 cpe:/a:php:php:3.0.17 cpe:/a:php:php:3.0.18 cpe:/a:php:php:4.0 cpe:/a:php:php:4.0.1 cpe:/a:php:php:4.0.1:patch1 cpe:/a:php:php:4.0.1:patch2 cpe:/a:php:php:4.0.2 cpe:/a:php:php:4.0.3 cpe:/a:php:php:4.0.3:patch1 cpe:/a:php:php:4.0.4 cpe:/a:php:php:4.0.5 cpe:/a:php:php:4.0.6 cpe:/a:php:php:4.0.7 cpe:/a:php:php:4.0.7:rc1 cpe:/a:php:php:4.0.7:rc2 cpe:/a:php:php:4.0.7:rc3 cpe:/a:php:php:4.1.0 cpe:/a:php:php:4.1.1 cpe:/a:php:php:4.1.2 cpe:/a:php:php:4.2::dev cpe:/a:php:php:4.2.0 cpe:/a:php:php:4.2.1 cpe:/a:php:php:4.2.2 cpe:/a:php:php:4.2.3 cpe:/a:php:php:4.3.0 cpe:/a:php:php:4.3.1 cpe:/a:php:php:4.3.2 cpe:/a:php:php:4.3.3 cpe:/a:php:php:4.3.4 cpe:/a:php:php:4.3.5 cpe:/a:php:php:4.3.6 cpe:/a:php:php:4.3.7 cpe:/a:php:php:4.3.8 cpe:/a:php:php:4.3.9 cpe:/a:php:php:5.0:rc1 cpe:/a:php:php:5.0:rc2 cpe:/a:php:php:5.0:rc3 cpe:/a:php:php:5.0.0 cpe:/a:php:php:5.0.1 cpe:/a:php:php:5.0.2 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1 cpe:/o:trustix:secure_linux:2.2 cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc

CVE-2004-1019

2005-01-10T00:00:00.000-05:00

2018-10-30T12:25:35.387-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SUSE SUSE-SU-2015:0365 SUSE openSUSE-SU-2015:0325 BUGTRAQ 20041215 Advisory 01/2004: Multiple vulnerabilities in PHP 4/5 OPENPKG OpenPKG-SA-2004.053 MISC http://www.hardened-php.net/advisories/012004.txt MANDRAKE MDKSA-2004:151 SUSE SUSE-SA:2005:002 CONFIRM http://www.oracle.com/technetwork/topics/security/bulletinjan2015-2370101.html CONFIRM http://www.php.net/release_4_3_10.php REDHAT RHSA-2004:687 REDHAT RHSA-2005:032 REDHAT RHSA-2005:816 HP HPSBMA01212 FEDORA FLSA:2344 XF php-unserialize-code-execution(18514) The deserialization code in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to cause a denial of service and execute arbitrary code via untrusted data to the unserialize function that may trigger "information disclosure, double-free and negative reference index array underflow" results.

cpe:/a:php:php:4.3.6 cpe:/a:php:php:4.3.7 cpe:/a:php:php:4.3.8 cpe:/a:php:php:4.3.9 cpe:/a:php:php:5.0:rc1 cpe:/a:php:php:5.0:rc2 cpe:/a:php:php:5.0:rc3 cpe:/a:php:php:5.0.0 cpe:/a:php:php:5.0.1 cpe:/a:php:php:5.0.2

CVE-2004-1020

2005-01-10T00:00:00.000-05:00

2017-07-10T21:30:40.107-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov CONECTIVA CLA-2005:915 GENTOO GLSA-200412-14 MANDRAKE MDKSA-2004:151 CONFIRM http://www.php.net/release_4_3_10.php HP HPSBMA01212 BUGTRAQ 20041216 PHP Input Validation Vulnerabilities BID 11981 XF php-addslashes-view-files(18516) The addslashes function in PHP 4.3.9 does not properly escape a NULL (/0) character, which may allow remote attackers to read arbitrary files in PHP applications that contain a directory traversal vulnerability in require or include statements, but are otherwise protected by the magic_quotes_gpc mechanism. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion.

cpe:/a:apple:ical:1.5.3

CVE-2004-1021

2005-03-01T00:00:00.000-05:00

2017-07-10T21:30:40.153-04:00

7.5

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

APPLE APPLE-SA-2004-11-22 XF ical-calendar-authorization-bypass(18209) iCal before 1.5.4 on Mac OS X 10.2.3, and other later versions, does not alert the user when handling calendars that use alarms, which allows attackers to execute programs and send e-mail via alarms.

cpe:/a:kerio:kerio_mailserver:5.0 cpe:/a:kerio:kerio_mailserver:5.1 cpe:/a:kerio:kerio_mailserver:5.1.1 cpe:/a:kerio:kerio_mailserver:5.6.3 cpe:/a:kerio:kerio_mailserver:5.6.4 cpe:/a:kerio:kerio_mailserver:5.6.5 cpe:/a:kerio:kerio_mailserver:5.7.0 cpe:/a:kerio:kerio_mailserver:5.7.1 cpe:/a:kerio:kerio_mailserver:5.7.2 cpe:/a:kerio:kerio_mailserver:5.7.3 cpe:/a:kerio:kerio_mailserver:5.7.4 cpe:/a:kerio:kerio_mailserver:5.7.5 cpe:/a:kerio:kerio_mailserver:5.7.6 cpe:/a:kerio:kerio_mailserver:5.7.7 cpe:/a:kerio:kerio_mailserver:5.7.8 cpe:/a:kerio:kerio_mailserver:5.7.9 cpe:/a:kerio:kerio_mailserver:5.7.10 cpe:/a:kerio:kerio_mailserver:6.0 cpe:/a:kerio:kerio_mailserver:6.0.1 cpe:/a:kerio:kerio_mailserver:6.0.2 cpe:/a:kerio:kerio_mailserver:6.0.3 cpe:/a:kerio:kerio_mailserver:6.0.4 cpe:/a:kerio:serverfirewall:1.0 cpe:/a:kerio:winroute_firewall:5.0.1 cpe:/a:kerio:winroute_firewall:5.0.2 cpe:/a:kerio:winroute_firewall:5.0.3 cpe:/a:kerio:winroute_firewall:5.0.4 cpe:/a:kerio:winroute_firewall:5.0.5 cpe:/a:kerio:winroute_firewall:5.0.6 cpe:/a:kerio:winroute_firewall:5.0.7 cpe:/a:kerio:winroute_firewall:5.0.8 cpe:/a:kerio:winroute_firewall:5.0.9 cpe:/a:kerio:winroute_firewall:5.1 cpe:/a:kerio:winroute_firewall:5.1.1 cpe:/a:kerio:winroute_firewall:5.1.2 cpe:/a:kerio:winroute_firewall:5.1.3 cpe:/a:kerio:winroute_firewall:5.1.4 cpe:/a:kerio:winroute_firewall:5.1.5 cpe:/a:kerio:winroute_firewall:5.1.6 cpe:/a:kerio:winroute_firewall:5.1.7 cpe:/a:kerio:winroute_firewall:5.1.8 cpe:/a:kerio:winroute_firewall:5.1.9 cpe:/a:kerio:winroute_firewall:5.1.10 cpe:/a:kerio:winroute_firewall:5.10 cpe:/a:kerio:winroute_firewall:6.0 cpe:/a:kerio:winroute_firewall:6.0.1 cpe:/a:kerio:winroute_firewall:6.0.2 cpe:/a:kerio:winroute_firewall:6.0.3 cpe:/a:kerio:winroute_firewall:6.0.4 cpe:/a:kerio:winroute_firewall:6.0.5 cpe:/a:kerio:winroute_firewall:6.0.6 cpe:/a:kerio:winroute_firewall:6.0.7 cpe:/a:kerio:winroute_firewall:6.0.8

CVE-2004-1022

2005-01-10T00:00:00.000-05:00

2017-07-10T21:30:40.217-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20041214 [CAN-2004-1022] Insecure Credential Storage on Kerio Software XF kerio-weak-encryption(18470) Kerio Winroute Firewall before 6.0.7, ServerFirewall before 1.0.1, and MailServer before 6.0.5 use symmetric encryption for user passwords, which allows attackers to decrypt the user database and obtain the passwords by extracting the secret key from within the software.

cpe:/a:kerio:kerio_mailserver:6.0.0 cpe:/a:kerio:kerio_mailserver:6.0.1 cpe:/a:kerio:kerio_mailserver:6.0.2 cpe:/a:kerio:kerio_mailserver:6.0.3 cpe:/a:kerio:kerio_mailserver:6.0.4 cpe:/a:kerio:serverfirewall:1.0.0 cpe:/a:kerio:winroute_firewall:6.0.0 cpe:/a:kerio:winroute_firewall:6.0.1 cpe:/a:kerio:winroute_firewall:6.0.2 cpe:/a:kerio:winroute_firewall:6.0.3 cpe:/a:kerio:winroute_firewall:6.0.4 cpe:/a:kerio:winroute_firewall:6.0.5 cpe:/a:kerio:winroute_firewall:6.0.6 cpe:/a:kerio:winroute_firewall:6.0.7 cpe:/a:kerio:winroute_firewall:6.0.8

CVE-2004-1023

2005-01-10T00:00:00.000-05:00

2017-07-10T21:30:40.277-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20041214 [CAN-2004-1023] Insecure default file system permissions on Microsoft versions of Kerio Software XF kerio-insecure-permissions(18471) Kerio Winroute Firewall before 6.0.9, ServerFirewall before 1.0.1, and MailServer before 6.0.5, when installed on Windows based systems, do not modify the ACLs for critical files, which allows local users with Power Users privileges to modify programs, install malicious DLLs in the plug-ins folder, and modify XML files related to configuration.

cpe:/a:enlightenment:imlib:1.9.13 cpe:/a:enlightenment:imlib:1.9.14 cpe:/o:gentoo:linux cpe:/o:redhat:linux:7.3 cpe:/o:redhat:linux:7.3::i386 cpe:/o:redhat:linux:7.3::i686 cpe:/o:redhat:linux:9.0::i386

CVE-2004-1025

2005-01-10T00:00:00.000-05:00

2017-10-10T21:29:40.170-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MANDRAKE MDKSA-2005:007 REDHAT RHSA-2004:651 BID 11830 Multiple heap-based buffer overflows in imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.

CVE-2004-1026

2005-01-10T00:00:00.000-05:00

2017-10-10T21:29:40.217-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

DEBIAN DSA-628 GENTOO GLSA-200412-03 MANDRAKE MDKSA-2005:007 REDHAT RHSA-2004:651 BID 11830 Multiple integer overflows in the image handler for imlib 1.9.14 and earlier, which is used by gkrellm and several window managers, allow remote attackers to cause a denial of service (application crash) and execute arbitrary code via certain image files.

cpe:/a:arj_software_inc.:unarj:2.62 cpe:/a:arj_software_inc.:unarj:2.63_a cpe:/a:arj_software_inc.:unarj:2.64 cpe:/a:arj_software_inc.:unarj:2.65 cpe:/o:gentoo:linux

CVE-2004-1027

2005-03-01T00:00:00.000-05:00

2017-07-10T21:30:40.340-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20041010 unarj dir-transversal bug (../../../..) FEDORA FLSA:2272 GENTOO GLSA-200411-29 DEBIAN DSA-628 DEBIAN DSA-652 REDHAT RHSA-2005:007 BID 11436 XF unarj-directory-traversal(17684) Directory traversal vulnerability in the -x (extract) command line option in unarj allows remote attackers to overwrite arbitrary files via an arj archive with filenames that contain .. (dot dot) sequences.

cpe:/o:ibm:aix:5.1 cpe:/o:ibm:aix:5.1l cpe:/o:ibm:aix:5.2 cpe:/o:ibm:aix:5.2.2 cpe:/o:ibm:aix:5.2_l cpe:/o:ibm:aix:5.3 cpe:/o:ibm:aix:5.3_l

CVE-2004-1028

2005-01-10T00:00:00.000-05:00

2017-07-10T21:30:40.387-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20041220 IBM AIX chcod Local Privilege Escalation Vulnerability AIXAPAR IY64354 AIXAPAR IY64355 AIXAPAR IY64356 XF aix-chcod-gain-privileges(18625) Untrusted execution path vulnerability in chcod on AIX IBM 5.1.0, 5.2.0, and 5.3.0 allows local users to execute arbitrary programs by modifying the PATH environment variable to point to a malicious "grep" program, which is executed from chcod.

cpe:/a:hp:java_sdk-rte:1.3::hp-ux_pa-risc cpe:/a:hp:java_sdk-rte:1.4::hp-ux_pa-risc cpe:/a:sun:jdk:1.3.1_01::linux cpe:/a:sun:jdk:1.3.1_01::solaris cpe:/a:sun:jdk:1.3.1_01a::windows cpe:/a:sun:jdk:1.3.1_02::linux cpe:/a:sun:jdk:1.3.1_02::solaris cpe:/a:sun:jdk:1.3.1_02::windows cpe:/a:sun:jdk:1.3.1_03::linux cpe:/a:sun:jdk:1.3.1_03::solaris cpe:/a:sun:jdk:1.3.1_03::windows cpe:/a:sun:jdk:1.3.1_04::windows cpe:/a:sun:jdk:1.3.1_05::linux cpe:/a:sun:jdk:1.3.1_05::solaris cpe:/a:sun:jdk:1.3.1_05::windows cpe:/a:sun:jdk:1.3.1_06::linux cpe:/a:sun:jdk:1.3.1_06::solaris cpe:/a:sun:jdk:1.3.1_06::windows cpe:/a:sun:jdk:1.3.1_07::linux cpe:/a:sun:jdk:1.3.1_07::solaris cpe:/a:sun:jdk:1.3.1_07::windows cpe:/a:sun:jdk:1.4::linux cpe:/a:sun:jdk:1.4::solaris cpe:/a:sun:jdk:1.4::windows cpe:/a:sun:jdk:1.4.0_01::windows cpe:/a:sun:jdk:1.4.0_02::linux cpe:/a:sun:jdk:1.4.0_02::solaris cpe:/a:sun:jdk:1.4.0_02::windows cpe:/a:sun:jdk:1.4.0_03::linux cpe:/a:sun:jdk:1.4.0_03::solaris cpe:/a:sun:jdk:1.4.0_03::windows cpe:/a:sun:jdk:1.4.0_4::linux cpe:/a:sun:jdk:1.4.0_4::solaris cpe:/a:sun:jdk:1.4.0_4::windows cpe:/a:sun:jdk:1.4.1::linux cpe:/a:sun:jdk:1.4.1::solaris cpe:/a:sun:jdk:1.4.1::windows cpe:/a:sun:jdk:1.4.1_01::linux cpe:/a:sun:jdk:1.4.1_01::solaris cpe:/a:sun:jdk:1.4.1_01::windows cpe:/a:sun:jdk:1.4.1_02::linux cpe:/a:sun:jdk:1.4.1_02::solaris cpe:/a:sun:jdk:1.4.1_02::windows cpe:/a:sun:jdk:1.4.1_03::linux cpe:/a:sun:jdk:1.4.1_03::solaris cpe:/a:sun:jdk:1.4.1_03::windows cpe:/a:sun:jdk:1.4.2::linux cpe:/a:sun:jdk:1.4.2::solaris cpe:/a:sun:jdk:1.4.2::windows cpe:/a:sun:jdk:1.4.2_01::linux cpe:/a:sun:jdk:1.4.2_02::linux cpe:/a:sun:jdk:1.4.2_03::linux cpe:/a:sun:jdk:1.4.2_03::solaris cpe:/a:sun:jdk:1.4.2_03::windows cpe:/a:sun:jdk:1.4.2_04::linux cpe:/a:sun:jdk:1.4.2_04::solaris cpe:/a:sun:jdk:1.4.2_04::windows cpe:/a:sun:jdk:1.4.2_05::linux cpe:/a:sun:jdk:1.4.2_05::solaris cpe:/a:sun:jdk:1.4.2_05::windows cpe:/a:sun:jre:1.3.0::linux cpe:/a:sun:jre:1.3.0::solaris cpe:/a:sun:jre:1.3.0::windows cpe:/a:sun:jre:1.3.0:update1:linux cpe:/a:sun:jre:1.3.0:update2:linux cpe:/a:sun:jre:1.3.0:update2:solaris cpe:/a:sun:jre:1.3.0:update2:windows cpe:/a:sun:jre:1.3.0:update3:linux cpe:/a:sun:jre:1.3.0:update4:linux cpe:/a:sun:jre:1.3.0:update4:windows cpe:/a:sun:jre:1.3.0:update5:linux cpe:/a:sun:jre:1.3.0:update5:solaris cpe:/a:sun:jre:1.3.0:update5:windows cpe:/a:sun:jre:1.3.1::linux cpe:/a:sun:jre:1.3.1:update1:linux cpe:/a:sun:jre:1.3.1:update1:solaris cpe:/a:sun:jre:1.3.1:update1:windows cpe:/a:sun:jre:1.3.1:update1a:windows cpe:/a:sun:jre:1.3.1:update4:solaris cpe:/a:sun:jre:1.3.1:update4:windows cpe:/a:sun:jre:1.3.1:update8:linux cpe:/a:sun:jre:1.3.1:update8:solaris cpe:/a:sun:jre:1.3.1:update8:windows cpe:/a:sun:jre:1.3.1_02::linux cpe:/a:sun:jre:1.3.1_02::solaris cpe:/a:sun:jre:1.3.1_02::windows cpe:/a:sun:jre:1.3.1_03::linux cpe:/a:sun:jre:1.3.1_03::solaris cpe:/a:sun:jre:1.3.1_03::windows cpe:/a:sun:jre:1.3.1_05::linux cpe:/a:sun:jre:1.3.1_05::solaris cpe:/a:sun:jre:1.3.1_05::windows cpe:/a:sun:jre:1.3.1_06::linux cpe:/a:sun:jre:1.3.1_06::solaris cpe:/a:sun:jre:1.3.1_06::windows cpe:/a:sun:jre:1.3.1_07::linux cpe:/a:sun:jre:1.3.1_07::solaris cpe:/a:sun:jre:1.3.1_07::windows cpe:/a:sun:jre:1.3.1_09::linux cpe:/a:sun:jre:1.3.1_09::solaris cpe:/a:sun:jre:1.3.1_09::windows cpe:/a:sun:jre:1.4::linux cpe:/a:sun:jre:1.4::solaris cpe:/a:sun:jre:1.4::windows cpe:/a:sun:jre:1.4.0_01::solaris cpe:/a:sun:jre:1.4.0_01::windows cpe:/a:sun:jre:1.4.0_02::linux cpe:/a:sun:jre:1.4.0_02::solaris cpe:/a:sun:jre:1.4.0_02::windows cpe:/a:sun:jre:1.4.0_03::linux cpe:/a:sun:jre:1.4.0_03::solaris cpe:/a:sun:jre:1.4.0_03::windows cpe:/a:sun:jre:1.4.0_04::linux cpe:/a:sun:jre:1.4.0_04::solaris cpe:/a:sun:jre:1.4.0_04::windows cpe:/a:sun:jre:1.4.1::linux cpe:/a:sun:jre:1.4.1::solaris cpe:/a:sun:jre:1.4.1::windows cpe:/a:sun:jre:1.4.1:update3:linux cpe:/a:sun:jre:1.4.1:update3:solaris cpe:/a:sun:jre:1.4.1:update3:windows cpe:/a:sun:jre:1.4.1_01::linux cpe:/a:sun:jre:1.4.1_01::solaris cpe:/a:sun:jre:1.4.1_01::windows cpe:/a:sun:jre:1.4.1_02::linux cpe:/a:sun:jre:1.4.1_02::solaris cpe:/a:sun:jre:1.4.1_02::windows cpe:/a:sun:jre:1.4.1_07::windows cpe:/a:sun:jre:1.4.2::linux cpe:/a:sun:jre:1.4.2::solaris cpe:/a:sun:jre:1.4.2::windows cpe:/a:sun:jre:1.4.2:update1:linux cpe:/a:sun:jre:1.4.2:update1:solaris cpe:/a:sun:jre:1.4.2:update1:windows cpe:/a:sun:jre:1.4.2:update2:linux cpe:/a:sun:jre:1.4.2:update2:solaris cpe:/a:sun:jre:1.4.2:update2:windows cpe:/a:sun:jre:1.4.2:update3:linux cpe:/a:sun:jre:1.4.2:update3:solaris cpe:/a:sun:jre:1.4.2:update3:windows cpe:/a:sun:jre:1.4.2:update4:linux cpe:/a:sun:jre:1.4.2:update4:solaris cpe:/a:sun:jre:1.4.2:update4:windows cpe:/a:sun:jre:1.4.2:update5:linux cpe:/a:sun:jre:1.4.2:update5:solaris cpe:/a:sun:jre:1.4.2:update5:windows cpe:/a:symantec:enterprise_firewall:8.0 cpe:/a:symantec:enterprise_firewall:8.0::solaris cpe:/a:symantec:enterprise_firewall:8.0::windows_2000_nt cpe:/h:symantec:gateway_security_5400:2.0 cpe:/h:symantec:gateway_security_5400:2.0.1 cpe:/o:conectiva:linux:10.0 cpe:/o:gentoo:linux cpe:/o:hp:hp-ux:11.00 cpe:/o:hp:hp-ux:11.11 cpe:/o:hp:hp-ux:11.22 cpe:/o:hp:hp-ux:11.23::ia64_64-bit

CVE-2004-1029

2005-03-01T00:00:00.000-05:00

2017-10-10T21:29:40.293-04:00

9.3

NETWORK

MEDIUM

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://jouko.iki.fi/adv/javaplugin.html APPLE APPLE-SA-2005-02-22 CONFIRM http://rpmfind.net/linux/RPM/suse/updates/9.3/i386/rpm/i586/java-1_4_2-sun-src-1.4.2.08-0.1.i586.html SREASON 61 SUNALERT 101523 SUNALERT 57591 IDEFENSE 20041122 Sun Java Plugin Arbitrary Package Access Vulnerability CERT-VN VU#760344 BID 12317 VUPEN ADV-2008-0599 CONFIRM http://www-1.ibm.com/support/docview.wss?uid=swg21257249 XF sdk-jre-applet-restriction-bypass(18188) The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages.

cpe:/a:thibault_godouet:fcron:2.0.1 cpe:/a:thibault_godouet:fcron:2.9.4 cpe:/o:gentoo:linux

CVE-2004-1030

2005-03-01T00:00:00.000-05:00

2017-07-10T21:30:40.527-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov GENTOO GLSA-200411-27 IDEFENSE 20041115 Multiple Security Vulnerabilities in Fcron BID 11684 XF fcron-fcronsighup-obtain-info(18075) fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to gain sensitive information by calling fcronsighup with an arbitrary file, which reveals the contents of the file that can not be parsed in an error message.

cpe:/a:thibault_godouet:fcron:2.0.1 cpe:/a:thibault_godouet:fcron:2.9.4 cpe:/o:gentoo:linux

CVE-2004-1031

2005-03-01T00:00:00.000-05:00

2017-07-10T21:30:40.573-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

GENTOO GLSA-200411-27 IDEFENSE 20041115 Multiple Security Vulnerabilities in Fcron BID 11684 XF fcron-fcronsighup-restrictions-bypass(18076) fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to bypass access restrictions and load an arbitrary configuration file by starting an suid process and pointing the fcronsighup configuration file to a /proc entry that is owned by root but modifiable by the user, such as /proc/self/cmdline or /proc/self/environ.

cpe:/a:thibault_godouet:fcron:2.0.1 cpe:/a:thibault_godouet:fcron:2.9.4 cpe:/o:gentoo:linux

CVE-2004-1032

2005-03-01T00:00:00.000-05:00

2017-07-10T21:30:40.637-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov GENTOO GLSA-200411-27 IDEFENSE 20041115 Multiple Security Vulnerabilities in Fcron XF fcron-fcronsighup-create-files(18077) fcronsighup in Fcron 2.0.1, 2.9.4, and possibly earlier versions allows local users to delete arbitrary files or create arbitrary empty files via a target filename with a large number of leading slash (/) characters such that fcronsighup does not properly append the intended fcrontab.sig to the resulting string.

cpe:/a:thibault_godouet:fcron:2.0.1 cpe:/a:thibault_godouet:fcron:2.9.4 cpe:/o:gentoo:linux

CVE-2004-1033

2005-03-01T00:00:00.000-05:00

2017-07-10T21:30:40.700-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov GENTOO GLSA-200411-27 IDEFENSE 20041115 Multiple Security Vulnerabilities in Fcron BID 11684 XF fcron-fcrontab-obtain-info(18078) Fcron 2.0.1, 2.9.4, and possibly earlier versions leak file descriptors of open files, which allows local users to bypass access restrictions and read fcron.allow and fcron.deny via the EDITOR environment variable.

cpe:/a:kaffeine:kaffeine_player:0.4.2 cpe:/a:kaffeine:kaffeine_player:0.4.3 cpe:/a:kaffeine:kaffeine_player:0.4.3b cpe:/a:kaffeine:kaffeine_player:0.5_rc1 cpe:/a:xine:gxine:0.3 cpe:/o:gentoo:linux

CVE-2004-1034

2005-03-01T00:00:00.000-05:00

2017-07-10T21:30:40.763-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20041025 Kaffeine Media Player Conteny Type overflow GENTOO GLSA-200411-14 CONFIRM http://sourceforge.net/tracker/index.php?func=detail&aid=1060299&group_id=9655&atid=109655 BID 11528 XF kaffeine-ram-bo(17849) Buffer overflow in the http_open function in Kaffeine before 0.5, whose code is also used in gxine before 0.3.3, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long Content-Type header for a Real Audio Media (.ram) playlist file.

cpe:/a:imap_proxy:imap_proxy:1.2.2

CVE-2004-1035

2005-03-01T00:00:00.000-05:00

2017-07-10T21:30:40.823-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20041107 up-imapproxy DoS vulnerabilities XF upimapproxy-dos(17999) Multiple integer signedness errors in (1) imapcommon.c, (2) main.c, (3) request.c, and (4) select.c for up-imapproxy IMAP proxy 1.2.2 allow remote attackers to cause a denial of service (server crash) and possibly leak sensitive information via certain literal values that are not properly handled when using the IMAP_Line_Read function.

cpe:/a:squirrelmail:squirrelmail:1.0.4 cpe:/a:squirrelmail:squirrelmail:1.0.5 cpe:/a:squirrelmail:squirrelmail:1.2 cpe:/a:squirrelmail:squirrelmail:1.2.1 cpe:/a:squirrelmail:squirrelmail:1.2.2 cpe:/a:squirrelmail:squirrelmail:1.2.3 cpe:/a:squirrelmail:squirrelmail:1.2.4 cpe:/a:squirrelmail:squirrelmail:1.2.5 cpe:/a:squirrelmail:squirrelmail:1.2.6 cpe:/a:squirrelmail:squirrelmail:1.2.7 cpe:/a:squirrelmail:squirrelmail:1.2.8 cpe:/a:squirrelmail:squirrelmail:1.2.9 cpe:/a:squirrelmail:squirrelmail:1.2.10 cpe:/a:squirrelmail:squirrelmail:1.2.11 cpe:/a:squirrelmail:squirrelmail:1.4 cpe:/a:squirrelmail:squirrelmail:1.4.1 cpe:/a:squirrelmail:squirrelmail:1.4.2 cpe:/a:squirrelmail:squirrelmail:1.4.3 cpe:/a:squirrelmail:squirrelmail:1.4.3_rc1 cpe:/a:squirrelmail:squirrelmail:1.4.3a cpe:/a:squirrelmail:squirrelmail:1.5_dev cpe:/o:gentoo:linux

CVE-2004-1036

2005-03-01T00:00:00.000-05:00

2017-10-10T21:29:40.373-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

CONECTIVA CLA-2004:905 APPLE APPLE-SA-2005-01-25 APPLE APPLE-SA-2005-03-21 BUGTRAQ 20041110 [SquirrelMail Security Advisory] Cross Site Scripting in encoded text CONFIRM http://voxel.dl.sourceforge.net/sourceforge/squirrelmail/sm143a-xss.diff GENTOO GLSA-200411-25 CONFIRM http://www.squirrelmail.org/ XF squirrelmail-mime-xss(18031) Cross-site scripting (XSS) vulnerability in the decoding of encoded text in certain headers in mime.php for SquirrelMail 1.4.3a and earlier, and 1.5.1-cvs before 23rd October 2004, allows remote attackers to execute arbitrary web script or HTML.

cpe:/a:twiki:twiki:2003-02-01 cpe:/o:gentoo:linux

CVE-2004-1037

2005-03-01T00:00:00.000-05:00

2017-07-10T21:30:40.950-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20041116 Re: [Full-Disclosure] TWiki search function allows arbitrary shell command execution CONECTIVA CLA-2005:918 BUGTRAQ 20041112 TWiki search function allows arbitrary shell command execution GENTOO GLSA-200411-33 CONFIRM http://twiki.org/cgi-bin/view/Codev/SecurityAlertExecuteCommandsWithSearch CIAC P-039 BID 11674 XF twik-search-command-execution(18062) The search function in TWiki 20030201 allows remote attackers to execute arbitrary commands via shell metacharacters in a search string.

cpe:/a:ieee:firewire_ieee:1394

CVE-2004-1038

2005-03-01T00:00:00.000-05:00

2018-10-19T11:30:32.257-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

MISC http://it.slashdot.org/article.pl?sid=08/03/04/1258210 BUGTRAQ 20041026 pacsec.jp advisory: Firewire/IEEE 1394 Considered Harmful to Physical Security MISC http://md.hudora.de/presentations/firewire/2005-firewire-cansecwest.pdf MISC http://pacsec.jp/advisories.html MISC http://storm.net.nz/projects/16 MISC http://storm.net.nz/static/files/ab_firewire_rux2k6-final.pdf MISC http://www.sec-consult.com/fileadmin/Whitepapers/Vista_Physical_Attacks.pdf BUGTRAQ 20080305 Firewire Attack on Windows Vista BUGTRAQ 20080305 Re: Firewire Attack on Windows Vista BUGTRAQ 20080305 RE: Firewire Attack on Windows Vista BUGTRAQ 20080306 Re: Firewire Attack on Windows Vista BUGTRAQ 20080306 RE: Firewire Attack on Windows Vista BUGTRAQ 20080307 Re: Firewire Attack on Windows Vista BUGTRAQ 20080308 Re: [Full-disclosure] Firewire Attack on Windows Vista BUGTRAQ 20080308 RE: [Full-disclosure] Firewire Attack on Windows Vista BUGTRAQ 20080309 Re: [Full-disclosure] Firewire Attack on Windows Vista BUGTRAQ 20080310 RE: [Full-disclosure] Firewire Attack on Windows Vista BUGTRAQ 20080309 Re: Firewire Attack on Windows Vista BUGTRAQ 20080310 Re: [Full-disclosure] Firewire Attack on Windows Vista MISC http://www.theage.com.au/news/security/hack-into-a-windows-pc-no-password-needed/2008/03/04/1204402423638.html XF firewire-ieee1394-interface-installed(18041) A design error in the IEEE1394 specification allows attackers with physical access to a device to read and write to sensitive memory using a modified FireWire/IEEE 1394 client, thus bypassing intended restrictions that would normally require greater degrees of physical access to exploit. NOTE: this was reported in 2008 to affect Windows Vista, but some Linux-based operating systems have protection mechanisms against this attack.

cpe:/o:sco:openserver:5.0.6 cpe:/o:sco:openserver:5.0.7 cpe:/o:sco:unixware:7.1.1 cpe:/o:sco:unixware:7.1.3 cpe:/o:sco:unixware:7.1.4

CVE-2004-1039

2005-01-11T00:00:00.000-05:00

2008-09-05T16:40:10.437-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov

2005-06-17T14:50:00.000-04:00

SCO SCOSA-2005.1 BUGTRAQ 20050111 [NILESA-20050101]: Denial of Service vulnerability due to the mountd bug BID 12225 The NFS mountd service on SCO UnixWare 7.1.1, 7.1.3, 7.1.4, and 7.0.1, and possibly other versions, when run from inetd, allows remote attackers to cause a denial of service (memory exhaustion) via a series of requests, which causes inetd to launch a separate process for each request.

cpe:/a:microsoft:ie:6.0 cpe:/o:microsoft:windows_xp::sp2:tablet_pc

CVE-2004-1043

2004-12-31T00:00:00.000-05:00

2018-10-12T17:35:34.577-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov BUGTRAQ 20041225 Microsoft Internet Explorer SP2 Fully Automated Remote Compromise CERT-VN VU#972415 CERT TA05-012B MS MS05-001 XF ie-helpactivexcontrol-save-file(18311) Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to execute arbitrary code by using the "Related Topics" command in the Help ActiveX Control (hhctrl.ocx) to open a Help popup window containing the PCHealth tools.htm file in the local zone and injecting Javascript to be executed, as demonstrated using "writehta.txt" and the ADODB recordset, which saves a .HTA file to the local system, aka the "HTML Help ActiveX control Cross Domain Vulnerability."

CVE-2004-1049

2004-12-31T00:00:00.000-05:00

2018-10-12T17:35:35.703-04:00

5.1

NETWORK

HIGH

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_USER_ACCESS

BUGTRAQ 20041223 Microsoft Windows LoadImage API Integer Buffer overflow SECTRACK 1012684 CIAC P-094 CERT-VN VU#625856 BID 12095 CERT TA05-012A MISC http://www.xfocus.net/flashsky/icoExp/index.html MS MS05-002 XF win-loadimage-bo(18668) Integer overflow in the LoadImage API of the USER32 Lib for Microsoft Windows allows remote attackers to execute arbitrary code via a .bmp, .cur, .ico or .ani file with a large image size field, which leads to a buffer overflow, aka the "Cursor and Icon Format Handling Vulnerability."

cpe:/a:avaya:ip600_media_servers cpe:/a:avaya:ip600_media_servers:r6 cpe:/a:avaya:ip600_media_servers:r7 cpe:/a:avaya:ip600_media_servers:r8 cpe:/a:avaya:ip600_media_servers:r9 cpe:/a:avaya:ip600_media_servers:r10 cpe:/a:avaya:ip600_media_servers:r11 cpe:/a:avaya:ip600_media_servers:r12 cpe:/a:microsoft:ie:6.0 cpe:/a:microsoft:ie:6.0:sp1 cpe:/h:avaya:definity_one_media_server cpe:/h:avaya:definity_one_media_server:r6 cpe:/h:avaya:definity_one_media_server:r7 cpe:/h:avaya:definity_one_media_server:r8 cpe:/h:avaya:definity_one_media_server:r9 cpe:/h:avaya:definity_one_media_server:r10 cpe:/h:avaya:definity_one_media_server:r11 cpe:/h:avaya:definity_one_media_server:r12 cpe:/h:avaya:s3400 cpe:/h:avaya:s8100 cpe:/h:avaya:s8100:r6 cpe:/h:avaya:s8100:r7 cpe:/h:avaya:s8100:r8 cpe:/h:avaya:s8100:r9 cpe:/h:avaya:s8100:r10 cpe:/h:avaya:s8100:r11 cpe:/h:avaya:s8100:r12 cpe:/o:avaya:modular_messaging_message_storage_server:s3400

CVE-2004-1050

2004-12-31T00:00:00.000-05:00

2018-10-12T17:35:37.733-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FULLDISC 20041023 python does mangleme (with IE bugs!) FULLDISC 20041025 python does mangleme (with IE bugs!) BUGTRAQ 20041102 MSIE <IFRAME> and <FRAME> tag NAME property bufferoverflow PoC CERT-VN VU#842160 BUGTRAQ 20041024 python does mangleme (with IE bugs!) BID 11515 CERT TA04-315A CERT TA04-336A MS MS04-040 XF ie-iframe-src-name-bo(17889) Heap-based buffer overflow in Internet Explorer 6 allows remote attackers to execute arbitrary code via long (1) SRC or (2) NAME attributes in IFRAME, FRAME, and EMBED elements, as originally discovered using the mangleme utility, aka "the IFRAME vulnerability" or the "HTML Elements Vulnerability."

cpe:/a:mandrakesoft:mandrake_multi_network_firewall:8.2 cpe:/a:todd_miller:sudo:1.5.6 cpe:/a:todd_miller:sudo:1.5.7 cpe:/a:todd_miller:sudo:1.5.8 cpe:/a:todd_miller:sudo:1.5.9 cpe:/a:todd_miller:sudo:1.6 cpe:/a:todd_miller:sudo:1.6.1 cpe:/a:todd_miller:sudo:1.6.2 cpe:/a:todd_miller:sudo:1.6.3 cpe:/a:todd_miller:sudo:1.6.3_p1 cpe:/a:todd_miller:sudo:1.6.3_p2 cpe:/a:todd_miller:sudo:1.6.3_p3 cpe:/a:todd_miller:sudo:1.6.3_p4 cpe:/a:todd_miller:sudo:1.6.3_p5 cpe:/a:todd_miller:sudo:1.6.3_p6 cpe:/a:todd_miller:sudo:1.6.3_p7 cpe:/a:todd_miller:sudo:1.6.4 cpe:/a:todd_miller:sudo:1.6.4_p1 cpe:/a:todd_miller:sudo:1.6.4_p2 cpe:/a:todd_miller:sudo:1.6.5 cpe:/a:todd_miller:sudo:1.6.5_p1 cpe:/a:todd_miller:sudo:1.6.5_p2 cpe:/a:todd_miller:sudo:1.6.6 cpe:/a:todd_miller:sudo:1.6.7 cpe:/a:todd_miller:sudo:1.6.8 cpe:/a:todd_miller:sudo:1.6.8_p1 cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::hppa cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::sparc cpe:/o:mandrakesoft:mandrake_linux:9.2 cpe:/o:mandrakesoft:mandrake_linux:9.2::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.0 cpe:/o:mandrakesoft:mandrake_linux:10.0::amd64 cpe:/o:mandrakesoft:mandrake_linux:10.1 cpe:/o:mandrakesoft:mandrake_linux:10.1::x86_64 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1 cpe:/o:mandrakesoft:mandrake_linux_corporate_server:2.1::x86_64 cpe:/o:trustix:secure_linux:1.5 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1 cpe:/o:trustix:secure_linux:2.2 cpe:/o:ubuntu:ubuntu_linux:4.1::ia64 cpe:/o:ubuntu:ubuntu_linux:4.1::ppc

CVE-2004-1051

2005-03-01T00:00:00.000-05:00

2017-07-10T21:30:41.310-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

APPLE APPLE-SA-2005-05-03 BUGTRAQ 20041112 Sudo version 1.6.8p2 now available (fwd) OPENPKG OpenPKG-SA-2005.002 DEBIAN DSA-596 MANDRAKE MDKSA-2004:133 BID 11668 CONFIRM http://www.sudo.ws/sudo/alerts/bash_functions.html TRUSTIX 2004-0061 XF sudo-bash-command-execution(18055) UBUNTU USN-28-1 sudo before 1.6.8p2 allows local users to execute arbitrary commands by using "()" style environment variables to create functions that have the same name as any program within the bash script that is called without using the program's full pathname.

cpe:/a:bnc:bnc:2.2.4 cpe:/a:bnc:bnc:2.4.6 cpe:/a:bnc:bnc:2.4.8 cpe:/a:bnc:bnc:2.6 cpe:/a:bnc:bnc:2.6.2 cpe:/a:bnc:bnc:2.6.4 cpe:/a:bnc:bnc:2.8.8 cpe:/a:bnc:bnc:2.8.9 cpe:/o:debian:debian_linux:3.0::alpha cpe:/o:debian:debian_linux:3.0::arm cpe:/o:debian:debian_linux:3.0::hppa cpe:/o:debian:debian_linux:3.0::ia-32 cpe:/o:debian:debian_linux:3.0::ia-64 cpe:/o:debian:debian_linux:3.0::m68k cpe:/o:debian:debian_linux:3.0::mips cpe:/o:debian:debian_linux:3.0::mipsel cpe:/o:debian:debian_linux:3.0::ppc cpe:/o:debian:debian_linux:3.0::s-390 cpe:/o:debian:debian_linux:3.0::sparc cpe:/o:gentoo:linux

CVE-2004-1052

2005-03-01T00:00:00.000-05:00

2017-07-10T21:30:41.370-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

BUGTRAQ 20041110 BNC 2.8.9 remote buffer overflow MISC http://security.lss.hr/en/index.php?page=details&ID=LSS-2004-11-03 DEBIAN DSA-595 BID 11647 XF bnc-irc-getnickuserhost-bo(18013) Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many (1) ! (exclamation) or (2) @ (at sign) characters.

cpe:/a:freebsd:fetch

CVE-2004-1053

2005-03-01T00:00:00.000-05:00

2017-07-10T21:30:41.417-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

FREEBSD FreeBSD-SA-04:16 BID 11702 XF fetch-http-header-bo(18160) Integer overflow in fetch on FreeBSD 4.1 through 5.3 allows remote malicious servers to execute arbitrary code via certain HTTP headers in an HTTP response, which lead to a buffer overflow.

cpe:/o:ibm:aix:5.1 cpe:/o:ibm:aix:5.1l cpe:/o:ibm:aix:5.2 cpe:/o:ibm:aix:5.2.2 cpe:/o:ibm:aix:5.2_l cpe:/o:ibm:aix:5.3 cpe:/o:ibm:aix:5.3_l

CVE-2004-1054

2005-01-10T00:00:00.000-05:00

2017-07-10T21:30:41.467-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

IDEFENSE 20041220 IBM AIX invscout Local Command Execution Vulnerability AIXAPAR IY64820 AIXAPAR IY64852 AIXAPAR IY64976 XF aix-invscout-gain-privileges(18619) Untrusted execution path vulnerability in invscout in IBM AIX 5.1.0, 5.2.0, and 5.3.0 allows local users to gain privileges by modifying the PATH environment variable to point to a malicious "uname" program, which is executed from lsvpd after lsvpd has been invoked by invscout.

cpe:/a:phpmyadmin:phpmyadmin:2.5.0 cpe:/a:phpmyadmin:phpmyadmin:2.5.1 cpe:/a:phpmyadmin:phpmyadmin:2.5.2 cpe:/a:phpmyadmin:phpmyadmin:2.5.4 cpe:/a:phpmyadmin:phpmyadmin:2.5.5 cpe:/a:phpmyadmin:phpmyadmin:2.5.5_pl1 cpe:/a:phpmyadmin:phpmyadmin:2.5.5_rc1 cpe:/a:phpmyadmin:phpmyadmin:2.5.5_rc2 cpe:/a:phpmyadmin:phpmyadmin:2.5.6_rc1 cpe:/a:phpmyadmin:phpmyadmin:2.5.7 cpe:/a:phpmyadmin:phpmyadmin:2.5.7_pl1 cpe:/a:phpmyadmin:phpmyadmin:2.6.0_pl1 cpe:/a:phpmyadmin:phpmyadmin:2.6.0_pl2 cpe:/o:gentoo:linux:1.4 cpe:/o:gentoo:linux:1.4:rc1 cpe:/o:gentoo:linux:1.4:rc2 cpe:/o:gentoo:linux:1.4:rc3

CVE-2004-1055

2005-03-01T00:00:00.000-05:00

2017-07-10T21:30:41.513-04:00

6.8

NETWORK

MEDIUM

NONE

PARTIAL

http://nvd.nist.gov

ALLOWS_OTHER_ACCESS

MISC http://www.netvigilance.com/html/advisory0005.htm CONFIRM http://www.phpmyadmin.net/home_page/security.php?issue=PMASA-2004-3 XF phpmyadmin-multiple-xss(18158) Multiple cross-site scripting (XSS) vulnerabilities in phpMyAdmin 2.6.0-pl2 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the PmaAbsoluteUri parameter, (2) the zero_rows parameter in read_dump.php, (3) the confirm form, or (4) an error message generated by the internal phpMyAdmin parser.

CVE-2004-1056

2005-01-10T00:00:00.000-05:00

2017-10-10T21:29:40.683-04:00

6.4

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov REDHAT RHSA-2005:092 REDHAT RHSA-2005:529 REDHAT RHSA-2005:551 REDHAT RHSA-2005:663 VUPEN ADV-2005-1878 FEDORA FLSA:2336 XF linux-i810-dma-dos(15972) UBUNTU USN-38-1 Direct Rendering Manager (DRM) driver in Linux kernel 2.6 does not properly check the DMA lock, which could allow remote attackers or local users to cause a denial of service (X Server crash) and possibly modify the video output.

cpe:/o:linux:linux_kernel:2.0 cpe:/o:linux:linux_kernel:2.0.1 cpe:/o:linux:linux_kernel:2.0.2 cpe:/o:linux:linux_kernel:2.0.3 cpe:/o:linux:linux_kernel:2.0.4 cpe:/o:linux:linux_kernel:2.0.5 cpe:/o:linux:linux_kernel:2.0.6 cpe:/o:linux:linux_kernel:2.0.7 cpe:/o:linux:linux_kernel:2.0.8 cpe:/o:linux:linux_kernel:2.0.9 cpe:/o:linux:linux_kernel:2.0.9.9 cpe:/o:linux:linux_kernel:2.0.10 cpe:/o:linux:linux_kernel:2.0.11 cpe:/o:linux:linux_kernel:2.0.12 cpe:/o:linux:linux_kernel:2.0.13 cpe:/o:linux:linux_kernel:2.0.14 cpe:/o:linux:linux_kernel:2.0.15 cpe:/o:linux:linux_kernel:2.0.16 cpe:/o:linux:linux_kernel:2.0.17 cpe:/o:linux:linux_kernel:2.0.18 cpe:/o:linux:linux_kernel:2.0.19 cpe:/o:linux:linux_kernel:2.0.20 cpe:/o:linux:linux_kernel:2.0.21 cpe:/o:linux:linux_kernel:2.0.22 cpe:/o:linux:linux_kernel:2.0.23 cpe:/o:linux:linux_kernel:2.0.24 cpe:/o:linux:linux_kernel:2.0.25 cpe:/o:linux:linux_kernel:2.0.26 cpe:/o:linux:linux_kernel:2.0.27 cpe:/o:linux:linux_kernel:2.0.28 cpe:/o:linux:linux_kernel:2.0.29 cpe:/o:linux:linux_kernel:2.0.30 cpe:/o:linux:linux_kernel:2.0.31 cpe:/o:linux:linux_kernel:2.0.32 cpe:/o:linux:linux_kernel:2.0.33 cpe:/o:linux:linux_kernel:2.0.34 cpe:/o:linux:linux_kernel:2.0.35 cpe:/o:linux:linux_kernel:2.0.36 cpe:/o:linux:linux_kernel:2.0.37 cpe:/o:linux:linux_kernel:2.0.38 cpe:/o:linux:linux_kernel:2.0.39 cpe:/o:linux:linux_kernel:2.1 cpe:/o:linux:linux_kernel:2.1.89 cpe:/o:linux:linux_kernel:2.2.0 cpe:/o:linux:linux_kernel:2.2.1 cpe:/o:linux:linux_kernel:2.2.2 cpe:/o:linux:linux_kernel:2.2.3 cpe:/o:linux:linux_kernel:2.2.4 cpe:/o:linux:linux_kernel:2.2.5 cpe:/o:linux:linux_kernel:2.2.6 cpe:/o:linux:linux_kernel:2.2.7 cpe:/o:linux:linux_kernel:2.2.8 cpe:/o:linux:linux_kernel:2.2.9 cpe:/o:linux:linux_kernel:2.2.10 cpe:/o:linux:linux_kernel:2.2.11 cpe:/o:linux:linux_kernel:2.2.12 cpe:/o:linux:linux_kernel:2.2.13 cpe:/o:linux:linux_kernel:2.2.14 cpe:/o:linux:linux_kernel:2.2.15 cpe:/o:linux:linux_kernel:2.2.15:pre16 cpe:/o:linux:linux_kernel:2.2.15_pre20 cpe:/o:linux:linux_kernel:2.2.16 cpe:/o:linux:linux_kernel:2.2.16:pre6 cpe:/o:linux:linux_kernel:2.2.17 cpe:/o:linux:linux_kernel:2.2.18 cpe:/o:linux:linux_kernel:2.2.19 cpe:/o:linux:linux_kernel:2.2.20 cpe:/o:linux:linux_kernel:2.2.21 cpe:/o:linux:linux_kernel:2.2.22 cpe:/o:linux:linux_kernel:2.2.23 cpe:/o:linux:linux_kernel:2.2.24 cpe:/o:linux:linux_kernel:2.2.25 cpe:/o:linux:linux_kernel:2.2.27:rc2 cpe:/o:linux:linux_kernel:2.3.0 cpe:/o:linux:linux_kernel:2.3.99 cpe:/o:linux:linux_kernel:2.3.99:pre1 cpe:/o:linux:linux_kernel:2.3.99:pre2 cpe:/o:linux:linux_kernel:2.3.99:pre3 cpe:/o:linux:linux_kernel:2.3.99:pre4 cpe:/o:linux:linux_kernel:2.3.99:pre5 cpe:/o:linux:linux_kernel:2.3.99:pre6 cpe:/o:linux:linux_kernel:2.3.99:pre7 cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.4.0:test1 cpe:/o:linux:linux_kernel:2.4.0:test10 cpe:/o:linux:linux_kernel:2.4.0:test11 cpe:/o:linux:linux_kernel:2.4.0:test12 cpe:/o:linux:linux_kernel:2.4.0:test2 cpe:/o:linux:linux_kernel:2.4.0:test3 cpe:/o:linux:linux_kernel:2.4.0:test4 cpe:/o:linux:linux_kernel:2.4.0:test5 cpe:/o:linux:linux_kernel:2.4.0:test6 cpe:/o:linux:linux_kernel:2.4.0:test7 cpe:/o:linux:linux_kernel:2.4.0:test8 cpe:/o:linux:linux_kernel:2.4.0:test9 cpe:/o:linux:linux_kernel:2.4.1 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.18::x86 cpe:/o:linux:linux_kernel:2.4.18:pre1 cpe:/o:linux:linux_kernel:2.4.18:pre2 cpe:/o:linux:linux_kernel:2.4.18:pre3 cpe:/o:linux:linux_kernel:2.4.18:pre4 cpe:/o:linux:linux_kernel:2.4.18:pre5 cpe:/o:linux:linux_kernel:2.4.18:pre6 cpe:/o:linux:linux_kernel:2.4.18:pre7 cpe:/o:linux:linux_kernel:2.4.18:pre8 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.19:pre1 cpe:/o:linux:linux_kernel:2.4.19:pre2 cpe:/o:linux:linux_kernel:2.4.19:pre3 cpe:/o:linux:linux_kernel:2.4.19:pre4 cpe:/o:linux:linux_kernel:2.4.19:pre5 cpe:/o:linux:linux_kernel:2.4.19:pre6 cpe:/o:linux:linux_kernel:2.6.20.1 cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::advanced_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:2.1::workstation_ia64 cpe:/o:redhat:enterprise_linux:3.0::advanced_servers cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation cpe:/o:redhat:enterprise_linux:4.0::advanced_server cpe:/o:redhat:enterprise_linux:4.0::enterprise_server cpe:/o:redhat:enterprise_linux:4.0::workstation

CVE-2004-1057

2005-01-21T00:00:00.000-05:00

2017-10-10T21:29:40.777-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov MISC http://www.kernel.org/pub/linux/kernel/people/andrea/kernels/v2.4/2.4.23aa3/00_VM_IO-4 REDHAT RHSA-2005:016 REDHAT RHSA-2005:017 REDHAT RHSA-2006:0140 BID 12338 CONFIRM https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=137821 XF linux-kernel-vmio-dos(19275) Multiple drivers in Linux kernel 2.4.19 and earlier do not properly mark memory with the VM_IO flag, which causes incorrect reference counts and may lead to a denial of service (kernel panic) when accessing freed kernel pages.

CVE-2004-1058

2005-01-10T00:00:00.000-05:00

2018-10-03T17:29:09.510-04:00

1.2

LOCAL

HIGH

NONE

PARTIAL

NONE

http://nvd.nist.gov SGI 20060402-01-U SUSE SUSE-SA:2006:012 DEBIAN DSA-1018 GENTOO GLSA-200408-24 MANDRAKE MDKSA-2005:022 REDHAT RHSA-2005:293 REDHAT RHSA-2006:0190 REDHAT RHSA-2006:0191 BID 11052 BID 11937 FEDORA FLSA:152532 XF linux-spawning-race-condition(17151) UBUNTU USN-38-1 Race condition in Linux kernel 2.6 allows local users to read the environment variables of another process that is still spawning via /proc/.../cmdline.

cpe:/a:mnogosearch:mnogosearch:3.1.19 cpe:/a:mnogosearch:mnogosearch:3.1.20 cpe:/a:mnogosearch:mnogosearch:3.2.10 cpe:/a:mnogosearch:mnogosearch:3.2.13 cpe:/a:mnogosearch:mnogosearch:3.2.14 cpe:/a:mnogosearch:mnogosearch:3.2.15 cpe:/a:mnogosearch:mnogosearch:3.2.16 cpe:/a:mnogosearch:mnogosearch:3.2.17 cpe:/a:mnogosearch:mnogosearch:3.2.18 cpe:/a:mnogosearch:mnogosearch:3.2.19 cpe:/a:mnogosearch:mnogosearch:3.2.20 cpe:/a:mnogosearch:mnogosearch:3.2.21 cpe:/a:mnogosearch:mnogosearch:3.2.22 cpe:/a:mnogosearch:mnogosearch:3.2.23 cpe:/a:mnogosearch:mnogosearch:3.2.24 cpe:/a:mnogosearch:mnogosearch:3.2.25 cpe:/a:mnogosearch:mnogosearch:3.2.26

CVE-2004-1059

2004-12-10T00:00:00.000-05:00

2017-07-10T21:30:41.793-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20041223 Cross-Site Scripting - an industry-wide problem MISC http://www.mikx.de/index.php?p=6 CONFIRM http://www.mnogosearch.org/history.html BID 11895 XF mnogosearch-search-xss(18434) Multiple cross-site scripting (XSS) vulnerabilities in mnoGoSearch 3.2.26 and earlier allow remote attackers to inject arbitrary HTML and web script via the (1) next and (2) prev result search pages, and the (3) extended and (4) simple search forms.

cpe:/a:icmp:icmp cpe:/a:tcp:tcp

CVE-2004-1060

2004-04-12T00:00:00.000-04:00

2018-10-19T11:30:33.880-04:00

5.0

NETWORK

LOW

NONE

PARTIAL

http://nvd.nist.gov SCO SCOSA-2006.4 HP SSRT4743 SREASON 19 SREASON 57 CISCO 20050412 Crafted ICMP Messages Can Cause Denial of Service MISC http://www.gont.com.ar/drafts/icmp-attacks-against-tcp.html HP HPSBUX01164 BID 13124 MISC http://www.uniras.gov.uk/niscc/docs/al-20050412-00308.html?lang=en MS MS05-019 Multiple TCP/IP and ICMP implementations, when using Path MTU (PMTU) discovery (PMTUD), allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via forged ICMP ("Fragmentation Needed and Don't Fragment was Set") packets with a low next-hop MTU value, aka the "Path MTU discovery attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on different attacks; CVE-2005-0065, CVE-2005-0066, CVE-2005-0067, and CVE-2005-0068 are related identifiers that are SPLIT based on the underlying vulnerability. While CVE normally SPLITs based on vulnerability, the attack-based identifiers exist due to the variety and number of affected implementations and solutions that address the attacks instead of the underlying vulnerabilities.

cpe:/a:mozilla:bugzilla:2.16.1 cpe:/a:mozilla:bugzilla:2.16.2 cpe:/a:mozilla:bugzilla:2.16.3 cpe:/a:mozilla:bugzilla:2.16.4 cpe:/a:mozilla:bugzilla:2.16.5 cpe:/a:mozilla:bugzilla:2.16.6 cpe:/a:mozilla:bugzilla:2.16.7 cpe:/a:mozilla:bugzilla:2.16.8 cpe:/a:mozilla:bugzilla:2.16.9 cpe:/a:mozilla:bugzilla:2.16.10 cpe:/a:mozilla:bugzilla:2.16.11 cpe:/a:mozilla:bugzilla:2.17 cpe:/a:mozilla:bugzilla:2.17.1 cpe:/a:mozilla:bugzilla:2.17.3 cpe:/a:mozilla:bugzilla:2.17.4 cpe:/a:mozilla:bugzilla:2.17.5 cpe:/a:mozilla:bugzilla:2.17.6 cpe:/a:mozilla:bugzilla:2.17.7

CVE-2004-1061

2005-01-04T00:00:00.000-05:00

2017-07-10T21:30:41.857-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov CONECTIVA CLSA-2005:1040 FULLDISC 20041223 Cross-Site Scripting - an industry-wide problem MISC http://www.mikx.de/index.php?p=6 BID 12154 CONFIRM https://bugzilla.mozilla.org/show_bug.cgi?id=272620 XF bugzilla-xss(18728) Cross-site scripting (XSS) vulnerability in Bugzilla before 2.18, including 2.16.x before 2.16.11, allows remote attackers to inject arbitrary HTML and web script via forced error messages, as demonstrated using the action parameter.

cpe:/a:viewcvs:viewcvs:0.9.2

CVE-2004-1062

2004-12-28T00:00:00.000-05:00

2017-07-10T21:30:41.917-04:00

4.3

NETWORK

MEDIUM

NONE

PARTIAL

NONE

http://nvd.nist.gov FULLDISC 20041223 Cross-Site Scripting - an industry-wide problem GENTOO GLSA-200412-26 MISC http://www.mikx.de/index.php?p=6 SUSE SUSE-SR:2005:001 XF viewcvs-xss(18718) Multiple cross-site scripting (XSS) vulnerabilities in ViewCVS 0.9.2 allow remote attackers to inject arbitrary HTML and web script via certain error messages.

CVE-2004-1063

2005-01-10T00:00:00.000-05:00

2017-07-10T21:30:41.980-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONECTIVA CLA-2005:915 GENTOO GLSA-200412-14 MISC http://www.hardened-php.net/advisories/012004.txt MANDRAKE MDKSA-2004:151 MANDRAKE MDKSA-2005:072 CONFIRM http://www.php.net/release_4_3_10.php HP HPSBMA01212 BUGTRAQ 20041215 Advisory 01/2004: Multiple vulnerabilities in PHP 4/5 BID 11964 XF php-safemodeexecdir-restriction-bypass(18511) UBUNTU USN-99-1 PHP 4.x to 4.3.9, and PHP 5.x to 5.0.2, when running in safe mode on a multithreaded Unix webserver, allows local users to bypass safe_mode_exec_dir restrictions and execute commands outside of the intended safe_mode_exec_dir via shell metacharacters in the current directory name. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion.

CVE-2004-1064

2005-01-10T00:00:00.000-05:00

2017-07-10T21:30:42.060-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov CONECTIVA CLA-2005:915 GENTOO GLSA-200412-14 MISC http://www.hardened-php.net/advisories/012004.txt MANDRAKE MDKSA-2004:151 MANDRAKE MDKSA-2005:072 CONFIRM http://www.php.net/release_4_3_10.php HP HPSBMA01212 BUGTRAQ 20041215 Advisory 01/2004: Multiple vulnerabilities in PHP 4/5 BID 11964 XF php-realpath-safemode-bypass(18512) UBUNTU USN-99-1 UBUNTU USN-99-2 The safe mode checks in PHP 4.x to 4.3.9 and PHP 5.x to 5.0.2 truncate the file path before passing the data to the realpath function, which could allow attackers to bypass safe mode. NOTE: this issue was originally REJECTed by its CNA before publication, but that decision is in active dispute. This candidate may change significantly in the future as a result of further discussion.

CVE-2004-1065

2005-01-10T00:00:00.000-05:00

2018-10-30T12:25:35.387-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

OPENPKG OpenPKG-SA-2004.053 MANDRAKE MDKSA-2004:151 SUSE SUSE-SA:2005:002 CONFIRM http://www.php.net/release_4_3_10.php REDHAT RHSA-2004:687 REDHAT RHSA-2005:032 HP HPSBMA01212 FEDORA FLSA:2344 XF php-exifreaddata-bo(18517) Buffer overflow in the exif_read_data function in PHP before 4.3.10 and PHP 5.x up to 5.0.2 allows remote attackers to execute arbitrary code via a long section name in an image file.

cpe:/o:freebsd:freebsd:4.0 cpe:/o:freebsd:freebsd:4.1 cpe:/o:freebsd:freebsd:4.1.1 cpe:/o:freebsd:freebsd:4.2 cpe:/o:freebsd:freebsd:4.3 cpe:/o:freebsd:freebsd:4.4 cpe:/o:freebsd:freebsd:4.5 cpe:/o:freebsd:freebsd:4.6 cpe:/o:freebsd:freebsd:4.7 cpe:/o:freebsd:freebsd:4.8 cpe:/o:freebsd:freebsd:4.8:releng cpe:/o:freebsd:freebsd:4.9 cpe:/o:freebsd:freebsd:4.10 cpe:/o:freebsd:freebsd:4.10:release cpe:/o:freebsd:freebsd:4.10:releng cpe:/o:freebsd:freebsd:5.0 cpe:/o:freebsd:freebsd:5.1 cpe:/o:freebsd:freebsd:5.2 cpe:/o:freebsd:freebsd:5.2.1:release cpe:/o:freebsd:freebsd:5.2.1:releng cpe:/o:freebsd:freebsd:5.3 cpe:/o:freebsd:freebsd:5.3:release cpe:/o:freebsd:freebsd:5.3:stable

CVE-2004-1066

2005-01-10T00:00:00.000-05:00

2017-07-10T21:30:42.217-04:00

3.6

LOCAL

LOW

NONE

PARTIAL

NONE

PARTIAL

http://nvd.nist.gov FREEBSD FreeBSD-SA-04:17 XF freebsd-profs-linprocfs-info-disclosure(18321) The cmdline pseudofiles in (1) procfs on FreeBSD 4.8 through 5.3, and (2) linprocfs on FreeBSD 5.x through 5.3, do not properly validate a process argument vector, which allows local users to cause a denial of service (panic) or read portions of kernel memory. NOTE: this candidate might be SPLIT into 2 separate items in the future.

CVE-2004-1067

2005-01-10T00:00:00.000-05:00

2017-07-10T21:30:42.277-04:00

10.0

NETWORK

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

CONFIRM http://asg.web.cmu.edu/cyrus/download/imapd/changes.html BID 11738 XF cyrus-mysaslcanonuser-offbyone-bo(18333) UBUNTU USN-37-1 Off-by-one error in the mysasl_canon_user function in Cyrus IMAP Server 2.2.9 and earlier leads to a buffer overflow, which may allow remote attackers to execute arbitrary code via the username.

CVE-2004-1068

2005-01-10T00:00:00.000-05:00

2017-10-10T21:29:41.137-04:00

6.2

LOCAL

HIGH

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SGI 20060402-01-U BUGTRAQ 20041214 [USN-38-1] Linux kernel vulnerabilities DEBIAN DSA-1067 DEBIAN DSA-1069 DEBIAN DSA-1070 DEBIAN DSA-1082 MANDRAKE MDKSA-2005:022 SUSE SUSE-SA:2004:044 REDHAT RHSA-2004:504 REDHAT RHSA-2004:505 REDHAT RHSA-2004:537 BUGTRAQ 20041119 Addendum, recent Linux <= 2.4.27 vulnerabilities BID 11715 FEDORA FLSA:2336 XF linux-afunix-race-condition(18230) A "missing serialization" error in the unix_dgram_recvmsg function in Linux 2.4.27 and earlier, and 2.6.x up to 2.6.9, allows local users to gain privileges via a race condition.

CVE-2004-1069

2005-01-10T00:00:00.000-05:00

2017-07-10T21:30:42.543-04:00

1.2

LOCAL

HIGH

NONE

PARTIAL

http://nvd.nist.gov BUGTRAQ 20041214 [USN-38-1] Linux kernel vulnerabilities MLIST [linux-kernel] 20041114 [PATCH] linux 2.9.10-rc1: Fix oops in unix_dgram_sendmsg when using MANDRAKE MDKSA-2005:022 XF linux-sockdgramsendmsg-race-condition(18312) Race condition in SELinux 2.6.x through 2.6.9 allows local users to cause a denial of service (kernel crash) via SOCK_SEQPACKET unix domain sockets, which are not properly handled in the sock_dgram_sendmsg function.

cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.4.0:test1 cpe:/o:linux:linux_kernel:2.4.0:test10 cpe:/o:linux:linux_kernel:2.4.0:test11 cpe:/o:linux:linux_kernel:2.4.0:test12 cpe:/o:linux:linux_kernel:2.4.0:test2 cpe:/o:linux:linux_kernel:2.4.0:test3 cpe:/o:linux:linux_kernel:2.4.0:test4 cpe:/o:linux:linux_kernel:2.4.0:test5 cpe:/o:linux:linux_kernel:2.4.0:test6 cpe:/o:linux:linux_kernel:2.4.0:test7 cpe:/o:linux:linux_kernel:2.4.0:test8 cpe:/o:linux:linux_kernel:2.4.0:test9 cpe:/o:linux:linux_kernel:2.4.1 cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:linux:linux_kernel:2.4.3 cpe:/o:linux:linux_kernel:2.4.4 cpe:/o:linux:linux_kernel:2.4.5 cpe:/o:linux:linux_kernel:2.4.6 cpe:/o:linux:linux_kernel:2.4.7 cpe:/o:linux:linux_kernel:2.4.8 cpe:/o:linux:linux_kernel:2.4.9 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.18::x86 cpe:/o:linux:linux_kernel:2.4.18:pre1 cpe:/o:linux:linux_kernel:2.4.18:pre2 cpe:/o:linux:linux_kernel:2.4.18:pre3 cpe:/o:linux:linux_kernel:2.4.18:pre4 cpe:/o:linux:linux_kernel:2.4.18:pre5 cpe:/o:linux:linux_kernel:2.4.18:pre6 cpe:/o:linux:linux_kernel:2.4.18:pre7 cpe:/o:linux:linux_kernel:2.4.18:pre8 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.19:pre1 cpe:/o:linux:linux_kernel:2.4.19:pre2 cpe:/o:linux:linux_kernel:2.4.19:pre3 cpe:/o:linux:linux_kernel:2.4.19:pre4 cpe:/o:linux:linux_kernel:2.4.19:pre5 cpe:/o:linux:linux_kernel:2.4.19:pre6 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.21:pre1 cpe:/o:linux:linux_kernel:2.4.21:pre4 cpe:/o:linux:linux_kernel:2.4.21:pre7 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.23:pre9 cpe:/o:linux:linux_kernel:2.4.23_ow2 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.24_ow1 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.4.26 cpe:/o:linux:linux_kernel:2.4.27 cpe:/o:linux:linux_kernel:2.4.27:pre1 cpe:/o:linux:linux_kernel:2.4.27:pre2 cpe:/o:linux:linux_kernel:2.4.27:pre3 cpe:/o:linux:linux_kernel:2.4.27:pre4 cpe:/o:linux:linux_kernel:2.4.27:pre5 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.0:test1 cpe:/o:linux:linux_kernel:2.6.0:test10 cpe:/o:linux:linux_kernel:2.6.0:test11 cpe:/o:linux:linux_kernel:2.6.0:test2 cpe:/o:linux:linux_kernel:2.6.0:test3 cpe:/o:linux:linux_kernel:2.6.0:test4 cpe:/o:linux:linux_kernel:2.6.0:test5 cpe:/o:linux:linux_kernel:2.6.0:test6 cpe:/o:linux:linux_kernel:2.6.0:test7 cpe:/o:linux:linux_kernel:2.6.0:test8 cpe:/o:linux:linux_kernel:2.6.0:test9 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.6:rc1 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.7:rc1 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.8:rc1 cpe:/o:linux:linux_kernel:2.6.8:rc2 cpe:/o:linux:linux_kernel:2.6.8:rc3 cpe:/o:linux:linux_kernel:2.6.9:2.6.20 cpe:/o:linux:linux_kernel:2.6_test9_cvs cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::advanced_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:2.1::workstation_ia64 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:redhat:fedora_core:core_3.0 cpe:/o:redhat:linux_advanced_workstation:2.1::ia64 cpe:/o:redhat:linux_advanced_workstation:2.1::itanium_processor cpe:/o:suse:suse_linux:1.0::desktop cpe:/o:suse:suse_linux:8::enterprise_server cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::enterprise_server cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.2 cpe:/o:trustix:secure_linux:1.5 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1 cpe:/o:trustix:secure_linux:2.2 cpe:/o:turbolinux:turbolinux_server:10.0

CVE-2004-1070

2005-01-10T00:00:00.000-05:00

2017-10-10T21:29:41.230-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SGI 20060402-01-U DEBIAN DSA-1067 DEBIAN DSA-1069 DEBIAN DSA-1070 DEBIAN DSA-1082 MISC http://www.isec.pl/vulnerabilities/isec-0017-binfmt_elf.txt MANDRAKE MDKSA-2005:022 REDHAT RHSA-2004:504 REDHAT RHSA-2004:505 REDHAT RHSA-2004:549 BID 11646 FEDORA FLSA:2336 XF linux-elf-setuid-gain-privileges(18025) The load_elf_binary function in the binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly check return values from calls to the kernel_read function, which may allow local users to modify sensitive memory in a setuid program and execute arbitrary code.

cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.4.0:test1 cpe:/o:linux:linux_kernel:2.4.0:test10 cpe:/o:linux:linux_kernel:2.4.0:test11 cpe:/o:linux:linux_kernel:2.4.0:test12 cpe:/o:linux:linux_kernel:2.4.0:test2 cpe:/o:linux:linux_kernel:2.4.0:test3 cpe:/o:linux:linux_kernel:2.4.0:test4 cpe:/o:linux:linux_kernel:2.4.0:test5 cpe:/o:linux:linux_kernel:2.4.0:test6 cpe:/o:linux:linux_kernel:2.4.0:test7 cpe:/o:linux:linux_kernel:2.4.0:test8 cpe:/o:linux:linux_kernel:2.4.0:test9 cpe:/o:linux:linux_kernel:2.4.1 cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:linux:linux_kernel:2.4.3 cpe:/o:linux:linux_kernel:2.4.4 cpe:/o:linux:linux_kernel:2.4.5 cpe:/o:linux:linux_kernel:2.4.6 cpe:/o:linux:linux_kernel:2.4.7 cpe:/o:linux:linux_kernel:2.4.8 cpe:/o:linux:linux_kernel:2.4.9 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.18::x86 cpe:/o:linux:linux_kernel:2.4.18:pre1 cpe:/o:linux:linux_kernel:2.4.18:pre2 cpe:/o:linux:linux_kernel:2.4.18:pre3 cpe:/o:linux:linux_kernel:2.4.18:pre4 cpe:/o:linux:linux_kernel:2.4.18:pre5 cpe:/o:linux:linux_kernel:2.4.18:pre6 cpe:/o:linux:linux_kernel:2.4.18:pre7 cpe:/o:linux:linux_kernel:2.4.18:pre8 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.19:pre1 cpe:/o:linux:linux_kernel:2.4.19:pre2 cpe:/o:linux:linux_kernel:2.4.19:pre3 cpe:/o:linux:linux_kernel:2.4.19:pre4 cpe:/o:linux:linux_kernel:2.4.19:pre5 cpe:/o:linux:linux_kernel:2.4.19:pre6 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.21:pre1 cpe:/o:linux:linux_kernel:2.4.21:pre4 cpe:/o:linux:linux_kernel:2.4.21:pre7 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.23:pre9 cpe:/o:linux:linux_kernel:2.4.23_ow2 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.24_ow1 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.4.26 cpe:/o:linux:linux_kernel:2.4.27 cpe:/o:linux:linux_kernel:2.4.27:pre1 cpe:/o:linux:linux_kernel:2.4.27:pre2 cpe:/o:linux:linux_kernel:2.4.27:pre3 cpe:/o:linux:linux_kernel:2.4.27:pre4 cpe:/o:linux:linux_kernel:2.4.27:pre5 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.0:test1 cpe:/o:linux:linux_kernel:2.6.0:test10 cpe:/o:linux:linux_kernel:2.6.0:test11 cpe:/o:linux:linux_kernel:2.6.0:test2 cpe:/o:linux:linux_kernel:2.6.0:test3 cpe:/o:linux:linux_kernel:2.6.0:test4 cpe:/o:linux:linux_kernel:2.6.0:test5 cpe:/o:linux:linux_kernel:2.6.0:test6 cpe:/o:linux:linux_kernel:2.6.0:test7 cpe:/o:linux:linux_kernel:2.6.0:test8 cpe:/o:linux:linux_kernel:2.6.0:test9 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.6:rc1 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.7:rc1 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.8:rc1 cpe:/o:linux:linux_kernel:2.6.8:rc2 cpe:/o:linux:linux_kernel:2.6.8:rc3 cpe:/o:linux:linux_kernel:2.6.9:2.6.20 cpe:/o:linux:linux_kernel:2.6_test9_cvs cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::advanced_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:2.1::workstation_ia64 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:redhat:fedora_core:core_3.0 cpe:/o:redhat:linux_advanced_workstation:2.1::ia64 cpe:/o:redhat:linux_advanced_workstation:2.1::itanium_processor cpe:/o:suse:suse_linux:1.0::desktop cpe:/o:suse:suse_linux:8::enterprise_server cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::enterprise_server cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.2 cpe:/o:trustix:secure_linux:1.5 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1 cpe:/o:trustix:secure_linux:2.2 cpe:/o:turbolinux:turbolinux_server:10.0

CVE-2004-1071

2005-01-10T00:00:00.000-05:00

2017-10-10T21:29:41.327-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SGI 20060402-01-U DEBIAN DSA-1067 DEBIAN DSA-1069 DEBIAN DSA-1070 DEBIAN DSA-1082 MISC http://www.isec.pl/vulnerabilities/isec-0017-binfmt_elf.txt MANDRAKE MDKSA-2005:022 REDHAT RHSA-2004:504 REDHAT RHSA-2004:505 REDHAT RHSA-2004:537 BID 11646 FEDORA FLSA:2336 XF linux-elf-setuid-gain-privileges(18025) The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, does not properly handle a failed call to the mmap function, which causes an incorrect mapped image and may allow local users to execute arbitrary code.

cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.4.0:test1 cpe:/o:linux:linux_kernel:2.4.0:test10 cpe:/o:linux:linux_kernel:2.4.0:test11 cpe:/o:linux:linux_kernel:2.4.0:test12 cpe:/o:linux:linux_kernel:2.4.0:test2 cpe:/o:linux:linux_kernel:2.4.0:test3 cpe:/o:linux:linux_kernel:2.4.0:test4 cpe:/o:linux:linux_kernel:2.4.0:test5 cpe:/o:linux:linux_kernel:2.4.0:test6 cpe:/o:linux:linux_kernel:2.4.0:test7 cpe:/o:linux:linux_kernel:2.4.0:test8 cpe:/o:linux:linux_kernel:2.4.0:test9 cpe:/o:linux:linux_kernel:2.4.1 cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:linux:linux_kernel:2.4.3 cpe:/o:linux:linux_kernel:2.4.4 cpe:/o:linux:linux_kernel:2.4.5 cpe:/o:linux:linux_kernel:2.4.6 cpe:/o:linux:linux_kernel:2.4.7 cpe:/o:linux:linux_kernel:2.4.8 cpe:/o:linux:linux_kernel:2.4.9 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.18::x86 cpe:/o:linux:linux_kernel:2.4.18:pre1 cpe:/o:linux:linux_kernel:2.4.18:pre2 cpe:/o:linux:linux_kernel:2.4.18:pre3 cpe:/o:linux:linux_kernel:2.4.18:pre4 cpe:/o:linux:linux_kernel:2.4.18:pre5 cpe:/o:linux:linux_kernel:2.4.18:pre6 cpe:/o:linux:linux_kernel:2.4.18:pre7 cpe:/o:linux:linux_kernel:2.4.18:pre8 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.19:pre1 cpe:/o:linux:linux_kernel:2.4.19:pre2 cpe:/o:linux:linux_kernel:2.4.19:pre3 cpe:/o:linux:linux_kernel:2.4.19:pre4 cpe:/o:linux:linux_kernel:2.4.19:pre5 cpe:/o:linux:linux_kernel:2.4.19:pre6 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.21:pre1 cpe:/o:linux:linux_kernel:2.4.21:pre4 cpe:/o:linux:linux_kernel:2.4.21:pre7 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.23:pre9 cpe:/o:linux:linux_kernel:2.4.23_ow2 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.24_ow1 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.4.26 cpe:/o:linux:linux_kernel:2.4.27 cpe:/o:linux:linux_kernel:2.4.27:pre1 cpe:/o:linux:linux_kernel:2.4.27:pre2 cpe:/o:linux:linux_kernel:2.4.27:pre3 cpe:/o:linux:linux_kernel:2.4.27:pre4 cpe:/o:linux:linux_kernel:2.4.27:pre5 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.0:test1 cpe:/o:linux:linux_kernel:2.6.0:test10 cpe:/o:linux:linux_kernel:2.6.0:test11 cpe:/o:linux:linux_kernel:2.6.0:test2 cpe:/o:linux:linux_kernel:2.6.0:test3 cpe:/o:linux:linux_kernel:2.6.0:test4 cpe:/o:linux:linux_kernel:2.6.0:test5 cpe:/o:linux:linux_kernel:2.6.0:test6 cpe:/o:linux:linux_kernel:2.6.0:test7 cpe:/o:linux:linux_kernel:2.6.0:test8 cpe:/o:linux:linux_kernel:2.6.0:test9 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.6:rc1 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.7:rc1 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.8:rc1 cpe:/o:linux:linux_kernel:2.6.8:rc2 cpe:/o:linux:linux_kernel:2.6.8:rc3 cpe:/o:linux:linux_kernel:2.6.9:2.6.20 cpe:/o:linux:linux_kernel:2.6_test9_cvs cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::advanced_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:2.1::workstation_ia64 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:redhat:fedora_core:core_3.0 cpe:/o:redhat:linux_advanced_workstation:2.1::ia64 cpe:/o:redhat:linux_advanced_workstation:2.1::itanium_processor cpe:/o:suse:suse_linux:1.0::desktop cpe:/o:suse:suse_linux:8::enterprise_server cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::enterprise_server cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.2 cpe:/o:trustix:secure_linux:1.5 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1 cpe:/o:trustix:secure_linux:2.2 cpe:/o:turbolinux:turbolinux_server:10.0

CVE-2004-1072

2005-01-10T00:00:00.000-05:00

2017-10-10T21:29:41.420-04:00

7.2

LOCAL

LOW

NONE

COMPLETE

http://nvd.nist.gov

ALLOWS_ADMIN_ACCESS

SGI 20060402-01-U DEBIAN DSA-1067 DEBIAN DSA-1069 DEBIAN DSA-1070 DEBIAN DSA-1082 MISC http://www.isec.pl/vulnerabilities/isec-0017-binfmt_elf.txt MANDRAKE MDKSA-2005:022 REDHAT RHSA-2004:504 REDHAT RHSA-2004:505 REDHAT RHSA-2004:537 REDHAT RHSA-2005:275 BID 11646 FEDORA FLSA:2336 XF linux-elf-setuid-gain-privileges(18025) The binfmt_elf loader (binfmt_elf.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, may create an interpreter name string that is not NULL terminated, which could cause strings longer than PATH_MAX to be used, leading to buffer overflows that allow local users to cause a denial of service (hang) and possibly execute arbitrary code.

cpe:/o:linux:linux_kernel:2.4.0 cpe:/o:linux:linux_kernel:2.4.0:test1 cpe:/o:linux:linux_kernel:2.4.0:test10 cpe:/o:linux:linux_kernel:2.4.0:test11 cpe:/o:linux:linux_kernel:2.4.0:test12 cpe:/o:linux:linux_kernel:2.4.0:test2 cpe:/o:linux:linux_kernel:2.4.0:test3 cpe:/o:linux:linux_kernel:2.4.0:test4 cpe:/o:linux:linux_kernel:2.4.0:test5 cpe:/o:linux:linux_kernel:2.4.0:test6 cpe:/o:linux:linux_kernel:2.4.0:test7 cpe:/o:linux:linux_kernel:2.4.0:test8 cpe:/o:linux:linux_kernel:2.4.0:test9 cpe:/o:linux:linux_kernel:2.4.1 cpe:/o:linux:linux_kernel:2.4.2 cpe:/o:linux:linux_kernel:2.4.3 cpe:/o:linux:linux_kernel:2.4.4 cpe:/o:linux:linux_kernel:2.4.5 cpe:/o:linux:linux_kernel:2.4.6 cpe:/o:linux:linux_kernel:2.4.7 cpe:/o:linux:linux_kernel:2.4.8 cpe:/o:linux:linux_kernel:2.4.9 cpe:/o:linux:linux_kernel:2.4.10 cpe:/o:linux:linux_kernel:2.4.11 cpe:/o:linux:linux_kernel:2.4.12 cpe:/o:linux:linux_kernel:2.4.13 cpe:/o:linux:linux_kernel:2.4.14 cpe:/o:linux:linux_kernel:2.4.15 cpe:/o:linux:linux_kernel:2.4.16 cpe:/o:linux:linux_kernel:2.4.17 cpe:/o:linux:linux_kernel:2.4.18 cpe:/o:linux:linux_kernel:2.4.18::x86 cpe:/o:linux:linux_kernel:2.4.18:pre1 cpe:/o:linux:linux_kernel:2.4.18:pre2 cpe:/o:linux:linux_kernel:2.4.18:pre3 cpe:/o:linux:linux_kernel:2.4.18:pre4 cpe:/o:linux:linux_kernel:2.4.18:pre5 cpe:/o:linux:linux_kernel:2.4.18:pre6 cpe:/o:linux:linux_kernel:2.4.18:pre7 cpe:/o:linux:linux_kernel:2.4.18:pre8 cpe:/o:linux:linux_kernel:2.4.19 cpe:/o:linux:linux_kernel:2.4.19:pre1 cpe:/o:linux:linux_kernel:2.4.19:pre2 cpe:/o:linux:linux_kernel:2.4.19:pre3 cpe:/o:linux:linux_kernel:2.4.19:pre4 cpe:/o:linux:linux_kernel:2.4.19:pre5 cpe:/o:linux:linux_kernel:2.4.19:pre6 cpe:/o:linux:linux_kernel:2.4.20 cpe:/o:linux:linux_kernel:2.4.21 cpe:/o:linux:linux_kernel:2.4.21:pre1 cpe:/o:linux:linux_kernel:2.4.21:pre4 cpe:/o:linux:linux_kernel:2.4.21:pre7 cpe:/o:linux:linux_kernel:2.4.22 cpe:/o:linux:linux_kernel:2.4.23 cpe:/o:linux:linux_kernel:2.4.23:pre9 cpe:/o:linux:linux_kernel:2.4.23_ow2 cpe:/o:linux:linux_kernel:2.4.24 cpe:/o:linux:linux_kernel:2.4.24_ow1 cpe:/o:linux:linux_kernel:2.4.25 cpe:/o:linux:linux_kernel:2.4.26 cpe:/o:linux:linux_kernel:2.4.27 cpe:/o:linux:linux_kernel:2.4.27:pre1 cpe:/o:linux:linux_kernel:2.4.27:pre2 cpe:/o:linux:linux_kernel:2.4.27:pre3 cpe:/o:linux:linux_kernel:2.4.27:pre4 cpe:/o:linux:linux_kernel:2.4.27:pre5 cpe:/o:linux:linux_kernel:2.6.0 cpe:/o:linux:linux_kernel:2.6.0:test1 cpe:/o:linux:linux_kernel:2.6.0:test10 cpe:/o:linux:linux_kernel:2.6.0:test11 cpe:/o:linux:linux_kernel:2.6.0:test2 cpe:/o:linux:linux_kernel:2.6.0:test3 cpe:/o:linux:linux_kernel:2.6.0:test4 cpe:/o:linux:linux_kernel:2.6.0:test5 cpe:/o:linux:linux_kernel:2.6.0:test6 cpe:/o:linux:linux_kernel:2.6.0:test7 cpe:/o:linux:linux_kernel:2.6.0:test8 cpe:/o:linux:linux_kernel:2.6.0:test9 cpe:/o:linux:linux_kernel:2.6.1 cpe:/o:linux:linux_kernel:2.6.1:rc1 cpe:/o:linux:linux_kernel:2.6.1:rc2 cpe:/o:linux:linux_kernel:2.6.2 cpe:/o:linux:linux_kernel:2.6.3 cpe:/o:linux:linux_kernel:2.6.4 cpe:/o:linux:linux_kernel:2.6.5 cpe:/o:linux:linux_kernel:2.6.6 cpe:/o:linux:linux_kernel:2.6.6:rc1 cpe:/o:linux:linux_kernel:2.6.7 cpe:/o:linux:linux_kernel:2.6.7:rc1 cpe:/o:linux:linux_kernel:2.6.8 cpe:/o:linux:linux_kernel:2.6.8:rc1 cpe:/o:linux:linux_kernel:2.6.8:rc2 cpe:/o:linux:linux_kernel:2.6.8:rc3 cpe:/o:linux:linux_kernel:2.6.9:2.6.20 cpe:/o:linux:linux_kernel:2.6_test9_cvs cpe:/o:redhat:enterprise_linux:2.1::advanced_server cpe:/o:redhat:enterprise_linux:2.1::advanced_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::enterprise_server cpe:/o:redhat:enterprise_linux:2.1::enterprise_server_ia64 cpe:/o:redhat:enterprise_linux:2.1::workstation cpe:/o:redhat:enterprise_linux:2.1::workstation_ia64 cpe:/o:redhat:enterprise_linux:3.0::advanced_server cpe:/o:redhat:enterprise_linux:3.0::enterprise_server cpe:/o:redhat:enterprise_linux:3.0::workstation_server cpe:/o:redhat:enterprise_linux_desktop:3.0 cpe:/o:redhat:fedora_core:core_2.0 cpe:/o:redhat:fedora_core:core_3.0 cpe:/o:redhat:linux_advanced_workstation:2.1::ia64 cpe:/o:redhat:linux_advanced_workstation:2.1::itanium_processor cpe:/o:suse:suse_linux:1.0::desktop cpe:/o:suse:suse_linux:8::enterprise_server cpe:/o:suse:suse_linux:8.1 cpe:/o:suse:suse_linux:8.2 cpe:/o:suse:suse_linux:9.0 cpe:/o:suse:suse_linux:9.0::enterprise_server cpe:/o:suse:suse_linux:9.0::x86_64 cpe:/o:suse:suse_linux:9.1 cpe:/o:suse:suse_linux:9.2 cpe:/o:trustix:secure_linux:1.5 cpe:/o:trustix:secure_linux:2.0 cpe:/o:trustix:secure_linux:2.1 cpe:/o:trustix:secure_linux:2.2 cpe:/o:turbolinux:turbolinux_server:10.0

CVE-2004-1073

2005-01-10T00:00:00.000-05:00

2017-10-10T21:29:41.513-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

NONE

http://nvd.nist.gov DEBIAN DSA-1067 DEBIAN DSA-1069 DEBIAN DSA-1070 DEBIAN DSA-1082 MISC http://www.isec.pl/vulnerabilities/isec-0017-binfmt_elf.txt MANDRAKE MDKSA-2005:022 REDHAT RHSA-2004:504 REDHAT RHSA-2004:505 REDHAT RHSA-2004:549 REDHAT RHSA-2005:293 REDHAT RHSA-2006:0190 REDHAT RHSA-2006:0191 BID 11646 FEDORA FLSA:2336 XF linux-elf-setuid-gain-privileges(18025) The open_exec function in the execve functionality (exec.c) in Linux kernel 2.4.x up to 2.4.27, and 2.6.x up to 2.6.8, allows local users to read non-readable ELF binaries by using the interpreter (PT_INTERP) functionality.

CVE-2004-1074

2005-01-10T00:00:00.000-05:00

2017-10-10T21:29:41.590-04:00

2.1

LOCAL

LOW

NONE

PARTIAL

http://nvd.nist.gov CONECTIVA CLA-2005:930 BUGTRAQ 20041216 [USN-39-1] Linux amd64 kernel vulnerability MLIST [linux-kernel] 20041111 a.out issue DEBIAN